Analysis
-
max time kernel
92s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
03/02/2024, 09:24
General
-
Target
2024-02-03_21e071c46e99b66540f89325ae11b6b1_icedid.exe
-
Size
315KB
-
MD5
21e071c46e99b66540f89325ae11b6b1
-
SHA1
51138fbbd52cf79ad9403e717132fe89cf59b795
-
SHA256
751d5f7260eca6a57f6570267a61a8deedf90039dabf73d6ea5c27f56008cc2c
-
SHA512
ee93d7c74fb2bd1d18663d1cb7b080dadda584cd789f42140f57a338f935de82fcc69daf8771b379e56878a311b5ef09bffc00ce75ccf9e8c0605aab9c5b418d
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-03_21e071c46e99b66540f89325ae11b6b1_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-03_21e071c46e99b66540f89325ae11b6b1_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Employ\boxes.exe"C:\Program Files\Employ\boxes.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
MD504a296d5ef57e92393b104c0d8f6b8b7
SHA1cfe0ac84e9d96bf86685ed2ae7299382603d4200
SHA25686760e80fd2e8342034e496f2a73a52e51507cf75844df9409fc30ab521bfb42
SHA512c1a028d6862819c2fc755c93d85b153f81dff9d2e7ffc95fbe82d42dca4f6287f1ea4bcb72c838033b89b847419a874b8e83078440da27135417cd4fb5bc6c1a