Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/03/2024, 16:37
General
-
Target
2024-03-08_fa7c368ca0d33e7ada76125f7e2bb74a_icedid.exe
-
Size
385KB
-
MD5
fa7c368ca0d33e7ada76125f7e2bb74a
-
SHA1
97abd8890f67e4c504070db792774e96b7fb9faf
-
SHA256
ce51ddb002f6e03351d620ad3e0109e62f29fa4e688bb60bd6e56fadf1771c4e
-
SHA512
d1a52c9cde04b9ae33764e03328e0f84d1403738027dd91ba97db45dc1094e6d28e3908d621b1a82bec6853d1510365fad1181ced107e569d3498cb98dd4f7be
-
SSDEEP
12288:zplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:1xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-08_fa7c368ca0d33e7ada76125f7e2bb74a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-08_fa7c368ca0d33e7ada76125f7e2bb74a_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\proper\structure.exe"C:\Program Files\proper\structure.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
385KB
MD5adf61e3c5f8467a8cebcc8e03100566f
SHA1158408d28863f05ae97d3e1fafe94298df44610b
SHA2561535515516556f4b256b556a7195c1977e1448c3ca74a46453a298db5199e7d1
SHA512d078292e7f9b6950a42fc81710422547bd1f69c7756cf7927311cbe26a9b7c567d346c30c49e27292927d88e4ef47288ed1aa628875afb2f7104454691ca900f