Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/03/2024, 18:28
General
-
Target
2024-03-06_309018e88d59cbdd448450dd99b87269_icedid.exe
-
Size
428KB
-
MD5
309018e88d59cbdd448450dd99b87269
-
SHA1
fa35d8fadef4c212e235c1ddcdfabc709decff66
-
SHA256
455012ae09e7f10e9d3e29099764fa7b0da6636751ce3606d23d33443b363f87
-
SHA512
d72d58c80d1986f0f359ca30d0bd743fe24ac17f69ccf47f76ddef1576e4f33d5d0b73ae6917f57e7e737326cee739c5966b6352ef73e35e1a1a0a720a78d785
-
SSDEEP
12288:iplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:uxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_309018e88d59cbdd448450dd99b87269_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_309018e88d59cbdd448450dd99b87269_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\message\handling.exe"C:\Program Files\message\handling.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD59d32d222bbb8aae0b3bf2a295afa90be
SHA1a9634e7ebf2a1147fdab5cdbd3ea1936e1ee1e32
SHA25616b0517e1f7c835d25db660fff1f7e153f5bc966f027c9de25b2a319b91d36ad
SHA5120f4e414a2a8eb1859607e384bb70625da239ce485e5b02263ed966cc97b9a4ca40c19dda74418f9e8ce035fd0494d5c418b9b77945d3562bac40bec7c628da49