Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
21/02/2024, 10:52
General
-
Target
2024-02-21_e6565c853378d8df8bb6f570f2a82389_icedid.exe
-
Size
382KB
-
MD5
e6565c853378d8df8bb6f570f2a82389
-
SHA1
cbbfd795d88c21ba75af8ec74c6e7afdedb5c364
-
SHA256
58e69f87cf8a0bdaf3b651fda13929aaf50e3fc28cdbd068adbf101349acbfb8
-
SHA512
24d8a7b5ef4ec3352a22c3b81dfb24f69f1c59519aa75a8e66663ffc64982f72a9774cee4c884b75837b02becf2124f81807ae28bdcacc57dc320a51d2227fa5
-
SSDEEP
6144:HplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:HplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_e6565c853378d8df8bb6f570f2a82389_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_e6565c853378d8df8bb6f570f2a82389_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\dependant\shipped.exe"C:\Program Files\dependant\shipped.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
382KB
MD503091f4811cec707fe079dead096c5c4
SHA1a8baf64f8f3c2291a073bbb785691eee685357f2
SHA256ecf00ba7dba8c8bb4352dd74c63674d056a45580d5c4d02d789c41e10fa57505
SHA5127cc5dc95af2876e8c98e39530984a3771894eb8a9b02da177094d0b839fdf8300457e6ffce584c12b7599dfbc8f0762ea6770c27ce5a7881d70d1de3c311a866