Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27/02/2024, 21:24
General
-
Target
2024-02-27_11d757f6a823de890d7c930f0ec5e7ef_icedid.exe
-
Size
383KB
-
MD5
11d757f6a823de890d7c930f0ec5e7ef
-
SHA1
698287dfd0b1c4a1c8cbbdf97cc7466a97c7dcb4
-
SHA256
ff91389099b4f8f0e6c31fecae03395ff006c3e06c3fdbfd287103762a5f569d
-
SHA512
2a21f4484337e389ad4e44edca38337ff4a244d1092cf551183275ea035be2e1066f86bdcd2f4b26cdab0bafe4a44ed819c55062433e653381a8871d4e682369
-
SSDEEP
6144:4plrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:4plrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-27_11d757f6a823de890d7c930f0ec5e7ef_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-27_11d757f6a823de890d7c930f0ec5e7ef_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\development\appropriate.exe"C:\Program Files\development\appropriate.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD5a76e5e32ce9fba427cdf9df1a66b058d
SHA120678e1c5a60f56a2c0f6512b62748ee024a5327
SHA256e8595bb4d46966ab582d45d26176fc1b5ba4e7140f833b9c447fa696ad48c9c8
SHA5125a96ad436082c2e2bc969326f5fb9adfe4c7761405f35be1fe91598892145d6b6ba6b013549d7a1fd16360e8c385c60619431251f60d5b96aa926227c53ad345