Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29-02-2024 01:49
General
-
Target
2024-02-29_b5775fdde4534f6f5eaee3b8feb9f946_icedid.exe
-
Size
385KB
-
MD5
b5775fdde4534f6f5eaee3b8feb9f946
-
SHA1
2616508e05faf14d8055cdb18976aacfc61fa8db
-
SHA256
c54b1e00f9ab96f006c0738352dd590b309b5547f3a874511fe4af4a703ad698
-
SHA512
5f59b2b0885700ef8d991dfa0e0f24c40747f1645afdcc2853fba9f180d6d6c773a12ab5cbeec1269da7f1c3b024ba484b0e16b60810000101ae5c840b82e4a6
-
SSDEEP
12288:lplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:XxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-29_b5775fdde4534f6f5eaee3b8feb9f946_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-29_b5775fdde4534f6f5eaee3b8feb9f946_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\facilitates\Reference.exe"C:\Program Files\facilitates\Reference.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
385KB
MD58e869ed3bd54665bfce87522c0037614
SHA197f560e9b6a58aa286e9012caaf120cee2ede3a5
SHA2567a648411e9106211921d5d77e274a51c225d832f278e6cb516e09a1d9da3319c
SHA512d7917bcfb07afa253671f1a9a925f7274c0c7b8ce96da111a49585f85962d61911b7271a69482c6ab83df50deafa25c4ddb6de738427e001f238bffa71ff0a21