Analysis
-
max time kernel
138s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04/02/2024, 10:25
General
-
Target
2024-02-04_3ea174385d8df81b1aa40d22cd389a02_icedid.exe
-
Size
314KB
-
MD5
3ea174385d8df81b1aa40d22cd389a02
-
SHA1
970fcb20ff535d454de7b1819f94283a0e08f584
-
SHA256
f4fc43195501d3fcf701e9f53f4d4789ace4bae039ae13767b0480c80f6aa244
-
SHA512
9ca769a790bf602117ef32c03184c72c706dfe470e0e6dd327768c3d6308e03973c4ae2bbfae589e98df90c792ec538c7375ad988e5e0e2ecb192862f2fd130e
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-04_3ea174385d8df81b1aa40d22cd389a02_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-04_3ea174385d8df81b1aa40d22cd389a02_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Synthesis\Composition.exe"C:\Program Files\Synthesis\Composition.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
314KB
MD52da08726405a6d4851e866e5d3e8485b
SHA12653a77a54ce1642d6a5a2d42b1eb53e047e3789
SHA2561df58fe9a4016647157d7d8adcd15dc1890f795219ae347cfe43f7ac05820942
SHA512d8e0970679154fbed5cf6a93ad41845365ccba1ac35062127fd91add0ed80424cf433b07047acb5df0a89f0add1417135ae1d5dd1334183847994d64eee153a2