Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
21-02-2024 10:52
General
-
Target
2024-02-21_e6565c853378d8df8bb6f570f2a82389_icedid.exe
-
Size
382KB
-
MD5
e6565c853378d8df8bb6f570f2a82389
-
SHA1
cbbfd795d88c21ba75af8ec74c6e7afdedb5c364
-
SHA256
58e69f87cf8a0bdaf3b651fda13929aaf50e3fc28cdbd068adbf101349acbfb8
-
SHA512
24d8a7b5ef4ec3352a22c3b81dfb24f69f1c59519aa75a8e66663ffc64982f72a9774cee4c884b75837b02becf2124f81807ae28bdcacc57dc320a51d2227fa5
-
SSDEEP
6144:HplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:HplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_e6565c853378d8df8bb6f570f2a82389_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_e6565c853378d8df8bb6f570f2a82389_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\convention\Platform.exe"C:\Program Files\convention\Platform.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
382KB
MD59df0a907aa3117a221c7ff6b07e9a22a
SHA13710844f4698dab125a1bf9b8bb7b43097790a9d
SHA2560478c1d06f4c46f514a722b3ac7940e63897dee2e720ace2bc5312be3dff8e3a
SHA512ea4e0ca986879bc07934646ed704689b203ce890c3859688aa93b8386d38d196318c491c489d85a710ce68d43c46ba82d0cf488c0921782009c35ea55f4f80c0