Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/02/2024, 00:45
General
-
Target
2024-02-25_90d81396941c968c4fced3969b8610ef_icedid.exe
-
Size
391KB
-
MD5
90d81396941c968c4fced3969b8610ef
-
SHA1
a7ba0de687ba5ddb388607718c751fca22e0f2ff
-
SHA256
b61c922d0f5c8d295b07b84a99e99aea2d7dc25e385469dbc0a23e3d2f2f361b
-
SHA512
875f14da29e124e04d55ec8f503f7457ecd465ba3fa837ea35cf5a428d0016b4f89404e21a274eaa70ffeceabea7178fbf180bb7ee9375b70d475c7aae795802
-
SSDEEP
12288:2plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:SxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-25_90d81396941c968c4fced3969b8610ef_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-25_90d81396941c968c4fced3969b8610ef_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\instead\previous.exe"C:\Program Files\instead\previous.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
391KB
MD516ff11affc16e131bbf757a578dd07f5
SHA199172c5241532fbf1aaa4ca08130b08987d732c9
SHA2564fedb91cc5dbb6200a847f885675b9311ea1e5e975aa9b50a569133d1db49d1e
SHA512282b0600ba50e01a4fe39bc22062cc258d033c2b7c33dce0561bdd1b1ef3d996e4da4ac22a1b13408595dff71c6dc0bbd773390982bd73128b264f8feb3fedba
-
Filesize
335KB
MD54cb6f83472f8ddb083431a1c692a82d1
SHA1fed56484f8d5029afa70d844343e35c5bc5115b0
SHA2562843418ce4935292a7b64934c52c204d43ce5101cba60f46ffdb0307cccfa621
SHA512be17f17e988cb11f9626567e65d288d2385a081a997ed39fad9d34556f9a039434349cf75167b546d0a557fe5f70429bf6ac0347c104bcd3f805691de17a5ee6