Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-02-2024 00:42
General
-
Target
2024-02-22_8c0c444b8d2aed45c27a697b3074e213_icedid.exe
-
Size
423KB
-
MD5
8c0c444b8d2aed45c27a697b3074e213
-
SHA1
20f3dd4cba8357c08d4b6de817599be730643880
-
SHA256
7a24c1c841fdf7faa491663fd2c128892b92122c77af9454ee846949f30444eb
-
SHA512
396c6ba9eacded03d5de943d701f4fd6cd044fd28f27e11edc4772fcdee6ac46f9f22871077f951665f0eb2c26e94c92642bfd5478990152f6a9aae019e6fc53
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:fxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_8c0c444b8d2aed45c27a697b3074e213_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_8c0c444b8d2aed45c27a697b3074e213_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Dutch\English.exe"C:\Program Files\Dutch\English.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
423KB
MD52e6c07cbabf920b6ce27c6e98b8732de
SHA1c97e43c96bf10bfc51be74268800bf5590a52540
SHA2562b53c9e620dea329eafbbb02a7b1e9bb230f978e5e75669125a7cadbd2b713a9
SHA512ce7c309f8426c8c92acf3dd4efc66d45b97e74228d2b715fbb7392be2fb525fae8e52925b314de86dbf9007e3fbf54574670f00dd9b0a392afc68ea612830adf