Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/03/2024, 19:49
General
-
Target
2024-03-05_c3a906e68db09518d21deb84815ac074_icedid.exe
-
Size
393KB
-
MD5
c3a906e68db09518d21deb84815ac074
-
SHA1
2ec22fd30c81e4aa9414fefe58508905609126f4
-
SHA256
10a6c109d82b7c3e481ee788a69180e933974ab004c92149f863d09973135f60
-
SHA512
da3d73316e484537d65304029698bf8df38ad602c59eddf258512d548a4219619eb58e910a4c5b64387816a852e838fdf58a1099e85fb7b113e7f1ca2eb73a59
-
SSDEEP
12288:HplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:pxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-05_c3a906e68db09518d21deb84815ac074_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-05_c3a906e68db09518d21deb84815ac074_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Czech\Dutch.exe"C:\Program Files\Czech\Dutch.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
393KB
MD5b82e36beee771cbd54aaba945fae5ace
SHA12c4410be56628e675114bb1aaca1846afe252a84
SHA256fa66bb2ad0c5c49c41011ab180fa4ed248523b24aae4ef17d3b284a9b211a8a5
SHA5127688de126544713d124c6e986ecacfcda0790c3fa0af1dfd42f02106edcd255e2781c8ccfaf3c4c6020ed279aafdf92d6917edeab27b6c5c87dcd1b8392f3eb9