Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
07/03/2024, 18:44
General
-
Target
2024-03-07_18a4b21e45c1e43fb8fb61ee73bf6a40_icedid.exe
-
Size
417KB
-
MD5
18a4b21e45c1e43fb8fb61ee73bf6a40
-
SHA1
ae96f6cbc0b1609ec9583becd41ccbb41a67ca7d
-
SHA256
8961ccf9b50d474a74972c2c9821e83fc55d6f4209a6b9062271f46030c7b4d1
-
SHA512
7747b87590c605a1ec0afe3782c35df8b91fafacb7f8e3caa60d81fefc48dbc6e1b0a034c16940da5cd8a57fdab7bea83769e2766129e1e3f733a6b33ffc1487
-
SSDEEP
12288:GplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:ixRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-07_18a4b21e45c1e43fb8fb61ee73bf6a40_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-07_18a4b21e45c1e43fb8fb61ee73bf6a40_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\appropriate\audience.exe"C:\Program Files\appropriate\audience.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD503e19ecf6ef1ffb1460a1bad0c157414
SHA1c790b7206ffb517ede61bb3ef95e496c6e47d47c
SHA256dbf3b87db4e0265064c11ae5498d5056cfe2db7d1485b27e0691d0afa7ef4f97
SHA51271d16cd331d8d7191fcf8dd222bab2f479865fefcbc4c89d4241b8124331659e8542c56645815a428f35744f812da1e839b78949799f7378c009cfdb650e9224
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB