Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
10/03/2024, 19:52
General
-
Target
2024-03-10_9fb0aa62c7fbffecda5356a9863113e8_icedid.exe
-
Size
418KB
-
MD5
9fb0aa62c7fbffecda5356a9863113e8
-
SHA1
ba91b73416a8fd7b2e4a8da46e0922ba03d08d62
-
SHA256
61d890db6077da17347f93d8b508e5a7b133d2aa6008b0c8f5d69600abf2dc77
-
SHA512
a80c7211ca7810625ebdfd7fa70906216c7730c9e740e31e2cdb0b0e9fc2eeac036ad7d558809238605f2bffc975f65a589e9040685625890103335b18e33d77
-
SSDEEP
12288:splrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:4xRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-10_9fb0aa62c7fbffecda5356a9863113e8_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-10_9fb0aa62c7fbffecda5356a9863113e8_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Composition\Performance.exe"C:\Program Files\Composition\Performance.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD59c66c0d2650c2ecafe218b2ab020f801
SHA181f79a0dcb434834f04c104c9aa59b53b07f85a2
SHA2562e4ae149e743a2356e4fa80a8cf7813c6742ef0ec995f859082aae1171dc9b17
SHA5127db28159be6f0e1aae2ca0b49a5968e48ab19f05cadd5a995091d6b5526f498b844275f21f5a35463baca99b370ffe908eeef5bca11719ea7faf85ed74d35a19
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB