Overview

overview

7

Static

static

3

2024-02-12...id.exe

windows7-x64

7

2024-02-12...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    92s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2024, 05:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-12_953d2efd06c34fbe70ad8de7c38231f5_icedid.exe

  • Size

    309KB

  • MD5

    953d2efd06c34fbe70ad8de7c38231f5

  • SHA1

    906e0b053f937f5f1d2c27f342dc5619de27561b

  • SHA256

    39f448bb2119641ec971555402a022cf4920804c84fe7f90decf6812b58f51ed

  • SHA512

    2f3f35edc54f0050fe4ec3ae569159f99ab5d88e13dfb0248eeb3111a476c79123f1b836f7a57233577bed035b7c70a8a6f50f3f2cd3f9437d8bf42c3ac2082a

  • SSDEEP

    3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-12_953d2efd06c34fbe70ad8de7c38231f5_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-12_953d2efd06c34fbe70ad8de7c38231f5_icedid.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4260
    • C:\Program Files\shipped\against.exe
      "C:\Program Files\shipped\against.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:4344

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files\shipped\against.exe
          Filesize

          310KB

          MD5

          c224933c9b9f7c002ce6e77ca7deee3c

          SHA1

          459fbcd2fe4a9ef0e4e62c404c3f9f81800bfba2

          SHA256

          cd8f332ad2c8468481cefddd297af5b1a775ce98fd7e43cb9d0d1b0ff67e5c63

          SHA512

          6d53fcf7a2a8531e8f65f67ddee393e8a97335d8134e0217ce68f0f292ebc586544710a083bfa944138a78ecb051eebf857ef0d1fa8d48b229d335242d97b66e

          Download Submit