7200ed19c7b59d43be5dc05c1ac776ede0e23c037269970726c16ef10b58f576

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/03/2024, 03:45

Target

2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe
Size

317KB
MD5

e84cc366d68cd2ed1801ee798c915b6b
SHA1

af01c04dfd7f339cfc3ec1eeffc86381d9a03d19
SHA256

7200ed19c7b59d43be5dc05c1ac776ede0e23c037269970726c16ef10b58f576
SHA512

fa896dd9192c4dc1678c707ffe0b629160a5191e4cd290d586274406b99b29d90ca581253960f770a99e697d11e4b702bfdc543d371462761992c69a951aa80e
SSDEEP

3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2364	Autorun.exe

Loads dropped DLL 2 IoCs

pid	Process
1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe
1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Panel\Autorun.exe	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe
File opened for modification	C:\Program Files\Panel\Autorun.exe	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe

Suspicious use of SetWindowsHookEx 8 IoCs

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28
PID 1908 wrote to memory of 2364	1908	2024-03-07_e84cc366d68cd2ed1801ee798c915b6b_icedid.exe	28

C:\Program Files\Panel\Autorun.exe

Filesize
317KB

MD5
45caed8acfee7afd47494efcecc9c966

SHA1
506c6dd9979d4747856361dfe2776eaa63b9ddf2

SHA256
daeb0fa1c3858f4ab14974d9d1d2176fd038ec87c48fb45f9f0e7564016ade36

SHA512
54b6ff4c0d826b2f3d75a6c2432f17ef9866db9076d2f5cc8fcdffc876d425ff926c6e493cf2d928b7d0419207eba09d87f5c675e222b778b6c1d8736da0389b

Download Submit