Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 14:52
General
-
Target
2024-02-14_f0df886a9c92b0e36209bd4999aad3f5_icedid.exe
-
Size
422KB
-
MD5
f0df886a9c92b0e36209bd4999aad3f5
-
SHA1
e795ab97336211e354b022a4b7ef70dc82234d1e
-
SHA256
c45f95ea816f97f78903e2fe9f3d86a04fbefe1da8c9ebdc84bfefa35f110991
-
SHA512
a027128a327d02b46c7737c78f5d7ac85a1451c13b022738accf16c241cbea15f3d43c3b2c221df084e84ad1d6f99c27d488deeee8ce724613ac51e4f5c1adf9
-
SSDEEP
12288:LplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:9xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_f0df886a9c92b0e36209bd4999aad3f5_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_f0df886a9c92b0e36209bd4999aad3f5_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\dependant\shipped.exe"C:\Program Files\dependant\shipped.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
422KB
MD5523fe8bc251593d48009501fd14d440e
SHA1820348b574cc44b8c20ae31a47ac1922d4fd707b
SHA2565bd788ff3aeb01edd569060bcfaa9402583782fdec4cd3ef0912580c67764587
SHA5125db30c5858f1f29ff4442bd7ecf0e4202205f832cece06398607f287c27c2c0cdd9e9ff624e7d442af18563fac36ce5280be25809c11005f826024a4114e52b0