Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
04-02-2024 10:25
General
-
Target
2024-02-04_3ea174385d8df81b1aa40d22cd389a02_icedid.exe
-
Size
314KB
-
MD5
3ea174385d8df81b1aa40d22cd389a02
-
SHA1
970fcb20ff535d454de7b1819f94283a0e08f584
-
SHA256
f4fc43195501d3fcf701e9f53f4d4789ace4bae039ae13767b0480c80f6aa244
-
SHA512
9ca769a790bf602117ef32c03184c72c706dfe470e0e6dd327768c3d6308e03973c4ae2bbfae589e98df90c792ec538c7375ad988e5e0e2ecb192862f2fd130e
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-04_3ea174385d8df81b1aa40d22cd389a02_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-04_3ea174385d8df81b1aa40d22cd389a02_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Graphics\Security.exe"C:\Program Files\Graphics\Security.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
314KB
MD5bb59a822f18b1dfcca95bce0351dc2df
SHA168c9c04bfd77040e06fdb2f01ac397ad380691b7
SHA2565248ec0236286ad91bc279e166b90ac5ce5e4ecdb756a64c4dfd8cf5ecf84842
SHA51209e98ae9b8fa9b8796ffbb79b5c9309c005735e5e525f672778801c2d485376c5715525c63461d6e539a8e32b2200f657486304034d4ad9f236dd5113a169476