Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-02-2024 08:12
General
-
Target
2024-02-12_fc28175e4e943f3d313e3ff0de0311a4_icedid.exe
-
Size
315KB
-
MD5
fc28175e4e943f3d313e3ff0de0311a4
-
SHA1
f5ebac4a3837d7415f46dd80dc1733bcc059b602
-
SHA256
67606368758be3616b626aaf3b467cdd3ca186b1201b70050a461adbb84c9e4a
-
SHA512
80fbbd6ae13a8f7e130a70b3717de7d8b0d3ae476e40f0a53105b73271e41bd57a57b1060d3f76beef39e74a24b3deaf494be181c143614bdabcb3124b0f8096
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_fc28175e4e943f3d313e3ff0de0311a4_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_fc28175e4e943f3d313e3ff0de0311a4_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\meter\requires.exe"C:\Program Files\meter\requires.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
315KB
MD5aa0faf423da32b2e0ab43d34f6aa37fb
SHA10d944a12475c926a579fb6f757b87c5217f3d0dc
SHA256badda6bc846becb9689c54872fd1162a95486f2ff90ca2030f81036d3e6dabcd
SHA51229a1ef6735c0c4a949532054e5b98ccafa34ef64d21d77e6288aaf8c21ab8a80c14144d1f1855bfb08c2a22458f4f08e8a8b18200eea923dc09511ff6125f001