Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12-03-2024 23:34
General
-
Target
2024-03-12_8c574bc069a1bb0e14a867a4464a79b7_icedid.exe
-
Size
418KB
-
MD5
8c574bc069a1bb0e14a867a4464a79b7
-
SHA1
3a3bdffab97d5de02946d823a38749bd8459d8a0
-
SHA256
8a93b94c2ccf7c81c34bc32923589a111465171a2cf452b1f3f08b539c11a077
-
SHA512
3a44ef96d11746d4e3c2bcc27f0307a5a4f66ceb3321b4d772353ef4f4ebe20a9c8e696fc9e0bcecf03b4de1cc327e2f347af55058c940c789983f7dcb4e2b2a
-
SSDEEP
12288:/plrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:RxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_8c574bc069a1bb0e14a867a4464a79b7_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_8c574bc069a1bb0e14a867a4464a79b7_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\headers\build.exe"C:\Program Files\headers\build.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD5f8269eee08398a3e0de7bc7104d40026
SHA1ed76884239c7e1d686d9f8e4819392a348bee47e
SHA2566ef2f05154f72b1ac00b950bb5b915316ecd6854242c2a005e1879a1dd11dd7a
SHA51274936ad61e99b18832d9465fb51e829eb9bec415523b4c9c97e3047dd3ddf7d2558a575f3cc72fa6886bc3b763984d50b9973b023d57c3f23bb0175d294b93a2
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB