Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/02/2024, 06:32
General
-
Target
2024-02-25_77f68c4a1c19848d6743bf2ee133a05e_icedid.exe
-
Size
266KB
-
MD5
77f68c4a1c19848d6743bf2ee133a05e
-
SHA1
62151959dd88295596c4c221a7371f13ee5981ac
-
SHA256
dcdc6d54006817c53570b79282a31b123ffb7d6e76837f209038a4e18aab74e5
-
SHA512
ffa1915c724d831d2da900cbe0939559b8844f3636f842edb88299c236ae49d4436947b5d03dc166847631af5aa55e275ef4d024b40fb80bad87ccc0071c34cd
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-25_77f68c4a1c19848d6743bf2ee133a05e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-25_77f68c4a1c19848d6743bf2ee133a05e_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Platform\December.exe"C:\Program Files\Platform\December.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
266KB
MD5dec9712c2b99daa2fdee60276e2c6475
SHA1650829542d05cf3bc76f4dc394011945e60a782f
SHA256cfec88cf9675ccf97da290505a0e48feeb707a642156e51fbeaab65d08be4029
SHA512d424206b817ecf43e3255787e7b4aa968fc50cbd641e8a0b502545d1bd0389ce1a90030e051a071279b1e20a1a7fd0d5f2e475a122fac61447f1a6bdc4b57480