Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
12-02-2024 20:23
General
-
Target
2024-02-12_18a417757b06b25890c12635774ae445_icedid.exe
-
Size
422KB
-
MD5
18a417757b06b25890c12635774ae445
-
SHA1
fd91d44db0f8f647a6867087ae36f6446c356542
-
SHA256
bb460c654a5ae9121d66addda4c868da99d6a3f75ab669437ff9e84ab3ddd78f
-
SHA512
3ea09eae449e00573d061f1c83ea6a6a17fe590e22d3a3567cafe1a3feb071c6c06e43a7d62a28eaa147adf89a710774514e79dfe7589ad8d492973a22838932
-
SSDEEP
12288:nplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:JxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_18a417757b06b25890c12635774ae445_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_18a417757b06b25890c12635774ae445_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\indicate\contain.exe"C:\Program Files\indicate\contain.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
423KB
MD5ef2c246ec713bcce86ae4a3ec6af271c
SHA113af3a9027b440c9c8a14ee61d6cffd587516ad8
SHA2568ca1a7d2686962d9675bf4aab73f0d30006ed907b8531c23484119a0f6927abd
SHA512b600291b26fa6ee7a18a3deac6e6e1867332d8993c702a33feeccfe4148305e5f123dac46a6da0e3307a698698aa4497a7b35ccbd4e07ddde5a6fbb9e03bba39