Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
29/02/2024, 00:38
General
-
Target
2024-02-29_5ef0f1d29d1c6773816171f1a2bf63af_icedid.exe
-
Size
417KB
-
MD5
5ef0f1d29d1c6773816171f1a2bf63af
-
SHA1
289572bcd3d5a12b39f0b366db28846787df4580
-
SHA256
3aba120cfb970f28940183a5f8411f199d70b0148506fcbea9cd940cc125b861
-
SHA512
1fa24311c49efb9b4a8b876466b854a3970adedafc1892b47171bb925d2b026e9e5c842b33d7c537ec095eb5630c0c44c7eb6a74ceeeeb251a28d17d55860461
-
SSDEEP
12288:uplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:axRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-29_5ef0f1d29d1c6773816171f1a2bf63af_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-29_5ef0f1d29d1c6773816171f1a2bf63af_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\provided\obtains.exe"C:\Program Files\provided\obtains.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
417KB
MD5d3b05144d0c25f0709fb0f093f296f2a
SHA1fbbe2ab7cbcf919d1e99c405f4c8105fb12b5f1a
SHA2563560e7ff77374a6991db273dcf5ace6c70fd40e1e566e7df6093c3658e4197fd
SHA51273f02ced267ce9b2e5912ed25958794a4fc832b999e9cbbc59673e644988d1872b5fafec68cb258c2c4adc237bd95ddfff688a5b511f1df2f7d155cd8a74f3cc
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB