Analysis
-
max time kernel
91s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22-02-2024 00:42
General
-
Target
2024-02-22_8c0c444b8d2aed45c27a697b3074e213_icedid.exe
-
Size
423KB
-
MD5
8c0c444b8d2aed45c27a697b3074e213
-
SHA1
20f3dd4cba8357c08d4b6de817599be730643880
-
SHA256
7a24c1c841fdf7faa491663fd2c128892b92122c77af9454ee846949f30444eb
-
SHA512
396c6ba9eacded03d5de943d701f4fd6cd044fd28f27e11edc4772fcdee6ac46f9f22871077f951665f0eb2c26e94c92642bfd5478990152f6a9aae019e6fc53
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:fxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_8c0c444b8d2aed45c27a697b3074e213_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_8c0c444b8d2aed45c27a697b3074e213_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Czech\Dutch.exe"C:\Program Files\Czech\Dutch.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
423KB
MD5472fbcc6cd0299a3469a5c1562795fe6
SHA1d44b2d6881b8b8b7315ad197494ce2865203cebd
SHA2561130824a573949d93ad86f8f16ad4eea2991ead961201de62c76052c68a1255e
SHA5120a38b223497093ed5e79eec6d5366ac0fa75899d86dc721b49a9f4f43e1abcd20cb7d0e5af3752860c908bfa364ddc4ad359836469e693581e856750f7d484b3