Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
14/02/2024, 06:32
General
-
Target
2024-02-14_2a276c8c1877389f2f8b0876629d65f4_icedid.exe
-
Size
277KB
-
MD5
2a276c8c1877389f2f8b0876629d65f4
-
SHA1
a1c113bc48ee1981189402f15928de14efb3a147
-
SHA256
350e3f9749c36b485cf47bda5dcd68b87427c39fffc4aead119eb5e8d2bb1ca2
-
SHA512
ba561a6e5edb8bb23239e047d35b98e8b56fba1910aafc06d31f965243d26bdfa0bd5fbbd738b1ad31bca0c30025350128c909e3a531db75744455634c1a5a36
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_2a276c8c1877389f2f8b0876629d65f4_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_2a276c8c1877389f2f8b0876629d65f4_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\component\Graphics.exe"C:\Program Files\component\Graphics.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
278KB
MD5b3cf8ea0457cb14c14f9f7068456031b
SHA1ec301815f008b474f5ffc174b2867f2ea8600a76
SHA2566cba59e96208fd200cc5ffdb24f87787fe9df6cd7d4fe6a2eef1aa0989191ef9
SHA5120b61cdceb58ef6c92b1332427c5ea8c789bfba4054d2c4de753e8f23a4909c2d42c17ec623ca18c3b174b3eaf36223b959d60f10cb44d83e7818e58a14181517