Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/02/2024, 21:30
General
-
Target
2024-02-19_3a7d6901f54557120237c3fdac2ce360_icedid.exe
-
Size
384KB
-
MD5
3a7d6901f54557120237c3fdac2ce360
-
SHA1
a1fbf7ec6c47b914a42d5c35a73b5b6434173eaf
-
SHA256
4405d796649b8c7b690555284dff8d3c921e6217a91c0ad831b536ae85b4a298
-
SHA512
1d97dea39806dab2ead851698c1e46bfbfcb7dc1ec537c36473b28db2858a198f3a7aeb6314e48247325288d9f50092e9052602234d9cb38e241cd3d93f42d87
-
SSDEEP
12288:xplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:DxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_3a7d6901f54557120237c3fdac2ce360_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_3a7d6901f54557120237c3fdac2ce360_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Documentation\parameter.exe"C:\Program Files\Documentation\parameter.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5e2ca0b93967828b12cc674b3c3c00295
SHA14ccbea312712f0f0849178206e1f0f7e62425157
SHA25620f4c373d893d68188799836ee6b9f9aa497203de6404669205ee75dfaef48ae
SHA512ab21df842ce6b44b87e3c650f775a7a7f6ce7ec7fc0acf1ba473eb162d2f158cf356e6c7ae928222d93b88608483f037ec1cd35498c49888e96e725d85fa703c