Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
22-02-2024 05:20
General
-
Target
2024-02-22_ad2f5bd143167832ba1dcf47e713485f_icedid.exe
-
Size
389KB
-
MD5
ad2f5bd143167832ba1dcf47e713485f
-
SHA1
53ebe5403b9eb7831935ebbc8eaf35e7580fb76a
-
SHA256
2c979e8bb99014c0c493c922b931397ff2ef8b40cfc6d33785ee56854d2d2ab5
-
SHA512
c41ffc6df527d7f6429856166c94ac3dc8f064b73df9ce4491929aef0aceb4af069eb7916d183010b33a92abf43dbebba701fc01372e7a702ccd567b9aeea29c
-
SSDEEP
12288:yplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:+xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_ad2f5bd143167832ba1dcf47e713485f_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_ad2f5bd143167832ba1dcf47e713485f_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Custom\Enabling.exe"C:\Program Files\Custom\Enabling.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
389KB
MD5598e47370e5e92569475fa2a18921093
SHA1bdccfd86ba8dd2d05ff3c2e4c79565d65855af98
SHA256a8c657c860f7ad8e6bb741bf99dc4cb1b06a84df127b81b1351729fdc1b395be
SHA51262b7ad7de1254782c06d85187e8542019d56376c869e626dd2124a2db02d854a18e62239c484dd77d23068ab027ff2ff1b0d61136a01ac77096b9704718e38ae