Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/03/2024, 15:29
General
-
Target
2024-03-06_2be8219bef3a73f9e2f011ab5d7ce5a6_icedid.exe
-
Size
416KB
-
MD5
2be8219bef3a73f9e2f011ab5d7ce5a6
-
SHA1
858c0bf9775088664258f1c2dd73c63a701e29e7
-
SHA256
92e9989467a5f73ac54c9330125868df56a3cb5a108b501a92a67a4ce2772473
-
SHA512
e25040460d35da4bc405f0a31772da64fd1cfdea2cc0a1f26aa86dd0f2135436679d8220f5cd22d4c3d190b92ee296a6acca107b81b33a4f2155714005fb99dd
-
SSDEEP
12288:nplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:JxRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_2be8219bef3a73f9e2f011ab5d7ce5a6_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_2be8219bef3a73f9e2f011ab5d7ce5a6_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\several\structures.exe"C:\Program Files\several\structures.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD53e68f32abb2a2430c7b801f35e3d1278
SHA1027843d8c71800d58aae1bc30970f5d4a7596421
SHA256592f7400d23e9f72fa4e70c7aa427d7c5f99e45b49f9c84c1e67b580b2421f7e
SHA512bf6d82291d2730c1c6f4b08fe7e5b74456169e98b3594acfbeee32f89b38861b31f31f310f89c3b4a081d414052bbbe0634617aafa80df86133dcada5b8ec39c
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB