Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
06/03/2024, 18:42
General
-
Target
2024-03-06_cf3db4af8b49ec2d03fd626013f8486c_icedid.exe
-
Size
428KB
-
MD5
cf3db4af8b49ec2d03fd626013f8486c
-
SHA1
ea3381309684eff24ed890ed109e15b3abdfd837
-
SHA256
ab15751734e2a1df55045c541fb0f7ca9b0999908ee9c302598006b14c83cf59
-
SHA512
8031fa97f246f3c7fab55d6d1f90092e357f003242fae8f8e46c5e555a8b3949a623a34de81d1e1c97c7bfe5cbe8de1408e9cb8afad8ec74b39f328bbd2205a5
-
SSDEEP
12288:VplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:HxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_cf3db4af8b49ec2d03fd626013f8486c_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_cf3db4af8b49ec2d03fd626013f8486c_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\systems\supports.exe"C:\Program Files\systems\supports.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
429KB
MD50f66a5a80f223a4407c6c434c56f6e67
SHA1ac5ab9147fd81ac96610c5e31ef5751b3af8ab5c
SHA256434f238c1e2adabe9e1da2d4194fe8edd2549a9f3bd11c744599a14f52b23665
SHA512f2698ab64c4938d0a1d6986ce5f98b8255401fd19e02a819233435000967f3341c461a9fa4a441d47d81c475a3f9b271c5cba6acb9a80d85970f532e33d165ad