Analysis
-
max time kernel
141s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12-02-2024 17:55
General
-
Target
2024-02-12_ee48a61bf289194852d0d4e8473288e7_icedid.exe
-
Size
317KB
-
MD5
ee48a61bf289194852d0d4e8473288e7
-
SHA1
4304b79ab48ccd2a84363d77e4e12e5968da45d2
-
SHA256
1de78bebd0bd64cf64ec969d48365ac78f0b7cd57053b70ec4f2007848ca4bba
-
SHA512
c6f6912d13c3d682c3b2d46ccccfbf4acc46cf6442e8c21b739022d8f27812ba45e384503e492f2b1dbbc17b5ee673f2237ac2f9d0dc35bd1a657027f93f108e
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_ee48a61bf289194852d0d4e8473288e7_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_ee48a61bf289194852d0d4e8473288e7_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\English\American.exe"C:\Program Files\English\American.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
317KB
MD53ab2fd47aa6e690236827bba91984b3d
SHA1c5a839c0a19930c7b7f26d39e0674d32386021ae
SHA256afd79170eb754e4b09ba9476cf21517bf0bc2d3d7271d26f14fda33983d237a9
SHA512e17cca7b1600ae57975f9435426c5500bd52a00deb01a6f057a133d0f45cb3c7f659e5f7a6bbe8044b12ec16521dee82b9f0438d738a8008443b20b00797588d