Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 00:07
General
-
Target
2024-02-13_5699ef3cee94fdb8bcb6d7b7d44c1759_icedid.exe
-
Size
313KB
-
MD5
5699ef3cee94fdb8bcb6d7b7d44c1759
-
SHA1
639f1c47ee077d96dd21e9301dfc1500aeb6c6be
-
SHA256
606149c27f6f76e48ee57bcd3259ca0d4960de3157e18b989892bf8bf7090d9a
-
SHA512
28f60f78109942e16ff535ce50bbe1f98d21a80826b201ba9981158a0f6c9e31eb7e01d5be324170dbe9e777c3a34797fec0f1875308d720f0b68ba80a89f37a
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-13_5699ef3cee94fdb8bcb6d7b7d44c1759_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-13_5699ef3cee94fdb8bcb6d7b7d44c1759_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\findout\Diagnostic.exe"C:\Program Files\findout\Diagnostic.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
313KB
MD5d8b5211274768588c33b18445e9ed74a
SHA1efa7ef3974ad825ccebd1f1d6a4c8b217dcd0300
SHA25652821d9e4e157edcf7f8ffa3094d2852f5ec7d0028e18f261e5e08c60d8b7f89
SHA512a48e2fa8018c1af6abd0c29c32d3761949998e3f0b41c2a034a8d563df9c24435d948ad719209aac3ffa50c24118a0f0eb795e3dacddb6159d249bf1614389c4