Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22/02/2024, 10:33
General
-
Target
2024-02-22_505e533188592de00c5b800da2f2a358_icedid.exe
-
Size
427KB
-
MD5
505e533188592de00c5b800da2f2a358
-
SHA1
2a2e56431ef8999ae1587f841b2f392ec8c11ec8
-
SHA256
2d25ccf479003d881ba5d2842ea1330b212e521029a80764a6912989b953d74d
-
SHA512
66f090dca1f0ffea75477a5984215827d910109c2fdbeb73dd5ebdcea09f83955c484e38fb1c2076ab9c22748ab1b2d475977cb69c5bf12d9d81aa3b41a28347
-
SSDEEP
12288:fplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:xxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_505e533188592de00c5b800da2f2a358_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_505e533188592de00c5b800da2f2a358_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Debugging\Internals.exe"C:\Program Files\Debugging\Internals.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
427KB
MD5e583ad5a0c298c878684120173ec18ad
SHA18631b1c3b1b618a489fd303fbf6ddc7e928a1b84
SHA2560b4f6aedfd41ad9572ea8081c8e178d335a76fa98c94c09ae20522866913ece9
SHA5125ff23081bfe4d6d82e6beb35bb13140d8c93f113bb07473c5120d7a210288be5c3f7453bbb372e46e2a4984cb00a9e7f189d8dfa08630975533c1983a4a8db89