Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
07/03/2024, 03:31
General
-
Target
2024-03-07_6163048f56dad6d6c2bf307c9040a074_icedid.exe
-
Size
382KB
-
MD5
6163048f56dad6d6c2bf307c9040a074
-
SHA1
da23d6db4ef600b27c65d3a994d1fa7aff780bc2
-
SHA256
86ef2f559408920c4a51cafb269b4bd50307f0693fa6ade8d6a0b386e772b8b7
-
SHA512
1e96d329642c456b3df27964ad35857e28b6dc9c9b43dc105b9631bb7cfdb377ad2212fba9a3c0a905053b353ba592637f8499adb494b909204e7b1451a465e0
-
SSDEEP
6144:/plrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:/plrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-07_6163048f56dad6d6c2bf307c9040a074_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-07_6163048f56dad6d6c2bf307c9040a074_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\novice\errors.exe"C:\Program Files\novice\errors.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD5df44220e151d99ae544ad9b1b439104f
SHA1abec49501d50034383ed7cf090ff2660ca024ff2
SHA256924ca101574c4c8e6982a3182bad1aabaf2a9c00fe22445595953012823e547b
SHA51205933d84689809cc3b8d2f54dfe3155e3e44eadc436d3a6a7db3a26c3f1d71d2f47c2dcdee2b90f02f05e15ac02f337b5ea1498c1d53beb9500aa0879eb565d0