Analysis
-
max time kernel
92s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22/02/2024, 18:25
General
-
Target
2024-02-22_1c23697252c21bacaf1416622e305841_icedid.exe
-
Size
315KB
-
MD5
1c23697252c21bacaf1416622e305841
-
SHA1
9a960b9cdba96f3f7a67f2d7eaf7bc80164fe13b
-
SHA256
9bdd39e95506f3dba1edf8a2aad902d92e37bead2fd813db4db63199b4c641da
-
SHA512
57f64a3306d5cb203e2d1e947d3771506d727c9a73bb437901d585c66dcc98677caedf2fcad74c2d27fb7dd18c42578a827aa88074b8450eb9de2dc9c0bc2cc4
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_1c23697252c21bacaf1416622e305841_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_1c23697252c21bacaf1416622e305841_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\shipped\against.exe"C:\Program Files\shipped\against.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
315KB
MD5b9c2d180ce47df0cf7e3e5507e60d5a3
SHA1ea1bdef0c384ea00b1026741ebbb1c92d15ed41f
SHA256555f0ae52da143b503eae62fd342c14876ed06e026cf67947ed132ee6be08d57
SHA512fc86495f54d2b2469b385bf9832587c2467a9304d0769040901b56234006564ea277be652119603b1f31fde27708173547ee86f39fa5a101a5500d682b7affd1