Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-03-2024 00:54
General
-
Target
2024-03-06_e7bb85e35be55a64bb25310dc996b9cf_icedid.exe
-
Size
416KB
-
MD5
e7bb85e35be55a64bb25310dc996b9cf
-
SHA1
092fe61af208f135e504c94bd75c819623e38aa1
-
SHA256
7436573d524a029ffeb286e3597820fc5b5dd04ac6baeff2920b58af70f6b47c
-
SHA512
28a89b626c2b3d5b30a57129482749a81b73c9b349aa2c8aadf25207bee28c25d2607dbc5dba01b118f5e30f82a7242a004c63a5bbf9f909203fcedc883c1fce
-
SSDEEP
12288:cplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:oxRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_e7bb85e35be55a64bb25310dc996b9cf_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_e7bb85e35be55a64bb25310dc996b9cf_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\GetVersion\application.exe"C:\Program Files\GetVersion\application.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD526f867653b8f49e85711eac094d92fb7
SHA1d2c566a69eaad7d07d5da2f03c4b40a4325a92d1
SHA2562438692db6b57509540f0414d03d5c70028ecd8aecb89308adc42770ad3e2663
SHA5125b457568a7290df253c4ec19ad735b763130f0cdecdb225279ccad8fea5956c54e17baa2e18c41413e53fb2d19c49535a0f207fa7dd8ffe302d571ba4c9daa43
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB