Analysis
-
max time kernel
91s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
03-02-2024 13:22
General
-
Target
2024-02-03_00696e8ba37d0d30221673a0fd69f074_icedid.exe
-
Size
428KB
-
MD5
00696e8ba37d0d30221673a0fd69f074
-
SHA1
880fe58bc6590f73d3b06b4255a272f04ef1c3cc
-
SHA256
70f7170fc26c3dc77fd07d5103f5ad297e502453ab331563af5023056fdad2ab
-
SHA512
ff4deaa0081c2987120f09c8032142295e5c70e3ffde9f625e6ca4a392636045d8a22bbc88587654c09ae7da95f0b76401c45ac3e7e8346a7e2066f2b27e8e77
-
SSDEEP
12288:VplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:HxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-03_00696e8ba37d0d30221673a0fd69f074_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-03_00696e8ba37d0d30221673a0fd69f074_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\managed\code.exe"C:\Program Files\managed\code.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD563d51abb895714f7570cd9201cb3fb4c
SHA12d5811d18e84e634bbda2926cd0a0054fc8e70fe
SHA2569a4348bba91e292193263aab8cdfd307ec66bd957e1061dfbcae6f13ecd44af9
SHA5124108a23ab5efb0f7dabf883b929e33e931391fa501a1cb3b658625b266782650c529745e3335f36561e48e46d89872ea837326dc8c17b09fdc0c8ff26dc995cd