Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11-02-2024 21:22
General
-
Target
2024-02-11_03e9a8703c0be6ce9b523d8444264c30_icedid.exe
-
Size
309KB
-
MD5
03e9a8703c0be6ce9b523d8444264c30
-
SHA1
238de3d50988e25f13bb69aaa7ae82b914685113
-
SHA256
342aee83af0cd66d78f81e8d0724899f4eeca605c4e519e64942cb07ba7aeb55
-
SHA512
f961fd80f0b52afd293d687fa670386b9ea7debe81fb6340af21a3dfd9b8ca3fafe40451f32b0d360c57809009b5e313580b0f6f2d53b68fff46135a806c662f
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-11_03e9a8703c0be6ce9b523d8444264c30_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-11_03e9a8703c0be6ce9b523d8444264c30_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\skipto\Call.exe"C:\Program Files\skipto\Call.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
309KB
MD51f43cb2a5b4fcc30647239e866fa9e49
SHA106a684e7e9fbb9f51dbe7446d21d2305bbceb218
SHA256d87eeac7d1379f01fc8aad803f98ea6fabcc17503dd01b65cdf1615887481ec4
SHA512088f50687f7f183abfbf45f64098382098f7f0092a991b24ba2f896c519d478b416c927bb79ebcbfeaec34c6719a6872c52351602d753a17780b4631f9980def