Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06/03/2024, 06:11
General
-
Target
2024-03-06_8b815bf43d7926d18dabcb3e8e2e0406_icedid.exe
-
Size
382KB
-
MD5
8b815bf43d7926d18dabcb3e8e2e0406
-
SHA1
b78841e036dae9a1711c2345f908d8346016eea3
-
SHA256
7c9dfea0ed3657c6643362e88ba349cfdd4ba7ea97bdefcd3eb5dc0a44b7b2f1
-
SHA512
ffea2a74d8cfc10a31770464a38243a622bafd3645f019d8ab4f607539a075908e39b2612cce72575df5d77191e35729b6cc6593f198f82721d0dff0b90ae62d
-
SSDEEP
6144:TplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:TplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_8b815bf43d7926d18dabcb3e8e2e0406_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_8b815bf43d7926d18dabcb3e8e2e0406_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\accordingly\Panel.exe"C:\Program Files\accordingly\Panel.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD51c616741fc04c57aba09b2aca7d0612b
SHA1f82747550f1461d1588e9f87cc6444c9fa508e18
SHA25667ddb0f6c5f401c66d5c9be2f9199f15d16d5030065d3c63766e0870f5b428ee
SHA51220edd67fbe0211ff0046df6926067480625309d2859cb82a2c5dacb46098c06d51f90428430cb6853b0c89ff08104d66c028d2fbfff18e9b6d21c4b702d6cf56