Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23/02/2024, 02:23
General
-
Target
2024-02-23_03025a8e1c8b7d933ff018bedf75b269_icedid.exe
-
Size
430KB
-
MD5
03025a8e1c8b7d933ff018bedf75b269
-
SHA1
e06f111087ac4136027800c59b19bb46a5dfd621
-
SHA256
58caee300dee87616ef769b62951a422b6d15be339391e4e7b037986f6c51a8b
-
SHA512
9a6153b8438ebf67150359d867f81d1c1f2b3d9f670c7809e23c0d38bdcc068e4e3e40de15d7efc3b5f6cf71d23030fd34207d8cb820a59316e75a40e1904a72
-
SSDEEP
12288:5plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:7xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-23_03025a8e1c8b7d933ff018bedf75b269_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-23_03025a8e1c8b7d933ff018bedf75b269_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\several\structures.exe"C:\Program Files\several\structures.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
430KB
MD5e26432ea2cc9d78163375e004b5adc03
SHA1d04857bccede7da2f056d28d548d8c581b5f47ab
SHA256d36308a977b2996ccd63963ba32f8a52e2c57dfc1495e0b0b3345a0b32e8e93d
SHA512f6b0a7edf19c1783db3703db6d956cab7d176352fc5e33bda00c8b3b818318326d922e59f100e6a6634d8e1b3bfde91bcddb7e43ecf8cc06429fa5862c0db305