Analysis
-
max time kernel
141s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
23-02-2024 10:04
General
-
Target
2024-02-23_e029018cbd209064075f7404127f4fff_icedid.exe
-
Size
382KB
-
MD5
e029018cbd209064075f7404127f4fff
-
SHA1
d4b351e234f0330a7bbdb359b3b18bd68de61072
-
SHA256
02d0d5022833b3882ca8e1e2f21cea9b772021265f5c581ee02cd2eb4f327941
-
SHA512
8d1db7679a88e1c8e7618b5bfb30a5561006fc9aa8b318dfeecfdd160f657488c98e81e4e742863c90beb886d814300f29ddb2d3006477f4d00d2e8ddd23257a
-
SSDEEP
6144:RplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:RplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-23_e029018cbd209064075f7404127f4fff_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-23_e029018cbd209064075f7404127f4fff_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\silently\approach.exe"C:\Program Files\silently\approach.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD51560e4e481e2bf354589a266dfe7e09a
SHA1b02db3ee3ab28771ef35b63498b11eb3ea3dadfc
SHA256c0b03825ee026120675608709ea44200efe6a76d5661b42fe319e223d399d95d
SHA512b6b6fea78acc9b1fabdf6f7b77025c05eb8321c2f065a89fbdef040cf84589d819bbe074667b819883e8fd64c1be3ca2fac56149f821c216266b9dbc0c6880a5