Analysis
-
max time kernel
121s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
13/02/2024, 17:55
General
-
Target
2024-02-13_7b22bf6b15bd417dbf1e975593960138_icedid.exe
-
Size
422KB
-
MD5
7b22bf6b15bd417dbf1e975593960138
-
SHA1
30b404f676623161c3db860728ad4145c42069a9
-
SHA256
338728ba961dc3123acac287f5fc2d63fef08d639d4872c979c0827361e2ac84
-
SHA512
4df253a10516c22e45df9bb02b68aa53f87b03bf77223ef0a18b25c5fb2ec9fc5a395459db88772fd03f60da7766ce0b1c0b43397358e85a19500c1870b88784
-
SSDEEP
12288:gplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:8xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-13_7b22bf6b15bd417dbf1e975593960138_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-13_7b22bf6b15bd417dbf1e975593960138_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Dutch\English.exe"C:\Program Files\Dutch\English.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
423KB
MD583a0dea58b4f433106b173066c319a9d
SHA1b2da741d876602691cb291e85af9ec45edfe45cd
SHA256600350a4bda2b3459041afb71cd749273138fe39a70249419d200c40bfc04734
SHA512b6f046495259f24312845dd8236304d148391950c0d97383948ac325f598cf5522a26fa5e192694051e3e14a59bf6e7d95e6a1ae790f94931e528a8f76bdd57b