18f39ecca8031a4cee319d483eddad8d0ba7c5acbba4ce023e2969ab3c8002cb

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-02-2024 20:00

Target

2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe
Size

266KB
MD5

bd1e90893c36b9320aa82ddd7a6fabf2
SHA1

abb1be162abbb5e74869e53277fe6975ab5eb4da
SHA256

18f39ecca8031a4cee319d483eddad8d0ba7c5acbba4ce023e2969ab3c8002cb
SHA512

c7378aa3c45220e7bb53a0e4c2e38b350f56326235f920a8858d80ea0cb6554eae9a329d724ad4967c7863683149d1f3a2967b5b19abb9de8eb2325c0cec6995
SSDEEP

3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1544	AutoPlay.exe

Loads dropped DLL 2 IoCs

pid	Process
1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe
1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Enabling\AutoPlay.exe	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe
File opened for modification	C:\Program Files\Enabling\AutoPlay.exe	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe

Suspicious use of SetWindowsHookEx 8 IoCs

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28
PID 1164 wrote to memory of 1544	1164	2024-02-23_bd1e90893c36b9320aa82ddd7a6fabf2_icedid.exe	28

\Program Files\Enabling\AutoPlay.exe

Filesize
266KB

MD5
88d5048262b11a512d68b5ca109081a6

SHA1
d8a499a0963dfdab1a6cda482ab3dbc91dd639c1

SHA256
f1b9a0eab218390ee60925b96ea7390663fd8d20ec1d07bd8826ed64f29f1f5b

SHA512
9dd6c79643d5d662684d740af5d27dd8c2209eee380353bc3f24af6f37495e7f04ec3639eb43f2c83edbe62392205d55df43b3eb30de6826f5787c7610050937

Download Submit