Analysis
-
max time kernel
92s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
14/02/2024, 14:52
General
-
Target
2024-02-14_f0df886a9c92b0e36209bd4999aad3f5_icedid.exe
-
Size
422KB
-
MD5
f0df886a9c92b0e36209bd4999aad3f5
-
SHA1
e795ab97336211e354b022a4b7ef70dc82234d1e
-
SHA256
c45f95ea816f97f78903e2fe9f3d86a04fbefe1da8c9ebdc84bfefa35f110991
-
SHA512
a027128a327d02b46c7737c78f5d7ac85a1451c13b022738accf16c241cbea15f3d43c3b2c221df084e84ad1d6f99c27d488deeee8ce724613ac51e4f5c1adf9
-
SSDEEP
12288:LplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:9xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_f0df886a9c92b0e36209bd4999aad3f5_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_f0df886a9c92b0e36209bd4999aad3f5_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\distribution\dependant.exe"C:\Program Files\distribution\dependant.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
422KB
MD57418127f33fecde3d17cea4fc101171e
SHA12b5d5298b4e905dd58b0f66201cfc4b6be181183
SHA2560490197131c3438d4d2c26a8c7c0a7f2f71414ae47aad809ac390cd07766673a
SHA5126455828c289fd7f4fce17c68e3fd1081a2ec54c7a33336780a48ff58e2d0e26c68d30e8efa635026942f120c90f0f9887e534682392cd406e4c4e52f2293fe9f