Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
21/02/2024, 14:01
General
-
Target
2024-02-21_b6420ccdfdf418c86771d86810053e89_icedid.exe
-
Size
426KB
-
MD5
b6420ccdfdf418c86771d86810053e89
-
SHA1
acf1ecc0bde168a3e74a6186cf88ec66e9699aec
-
SHA256
1b3542e2c0c93281ab0f257f56d6f1f6d18e6aa79c59c3d207dacbc65d227e1f
-
SHA512
fb85417d352d14b52c06e35da0eded5462ad2173f75ed339e8edbf423da8d10d40a0d0d65670a05854be4e63ef0c826bea8268768838425805117ce7e2b553f6
-
SSDEEP
12288:JplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:LxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_b6420ccdfdf418c86771d86810053e89_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_b6420ccdfdf418c86771d86810053e89_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\towrite\following.exe"C:\Program Files\towrite\following.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
426KB
MD579ca2eeb4e40b9e041bbb3146b233492
SHA1b1a17df5c5a7d27c73607acea6566ef24cdc20c2
SHA25630721b4be4ab7cbf8ab464f25ce52ae9a169d7192a3f148c4cbe55cc50cff7f4
SHA51212742185753ab967f9eecf935f2fb29ede4bf095eab6a4cb08c63a0c10edb46be7583e1daecd06c43061702d2017ce9bf318b869f0da89040c72b6645767b63c