Analysis
-
max time kernel
170s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
12/03/2024, 23:34
General
-
Target
2024-03-12_8c574bc069a1bb0e14a867a4464a79b7_icedid.exe
-
Size
418KB
-
MD5
8c574bc069a1bb0e14a867a4464a79b7
-
SHA1
3a3bdffab97d5de02946d823a38749bd8459d8a0
-
SHA256
8a93b94c2ccf7c81c34bc32923589a111465171a2cf452b1f3f08b539c11a077
-
SHA512
3a44ef96d11746d4e3c2bcc27f0307a5a4f66ceb3321b4d772353ef4f4ebe20a9c8e696fc9e0bcecf03b4de1cc327e2f347af55058c940c789983f7dcb4e2b2a
-
SSDEEP
12288:/plrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:RxRQ+Fucuvm0a/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_8c574bc069a1bb0e14a867a4464a79b7_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_8c574bc069a1bb0e14a867a4464a79b7_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\reporting\message.exe"C:\Program Files\reporting\message.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD59ca176b07f7d978cd588db27c4e1b1ed
SHA1f6d679d681aa80695dc2ccdd567d255dfbe8e18b
SHA25633571819633ef08ed10a08c32798b558dd0274bb7713487035f9496dd1bf5999
SHA512cdeb9e33d7e0026f8d8c5e6b59a725f940bf713bf8a744def29617e3f512eae18ca944d8efebdf46c78782d4bebe8404e01f51502038aeb7efb6505182f2ab54
-
Filesize
320KB
MD5e1d388497ba199c877598adc64c1fa1c
SHA1d3cdab35876ae79062da575d62702aaf6188d469
SHA256c0f81c44c5de36eef10d403e71a955bc5edfb49de0bcbed4e84c68a638354d2e
SHA51237fbdc95489262d5871e929ec7c116b4396260fba226d8425a9f6032c006ac2376b84307c812a539598c5cafbb1142cc98ef935dc1f20a6bc1b84a1c8c5dd472
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB