Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12-03-2024 01:52
General
-
Target
2024-03-12_b458c7066522e5434ee1b3f379fd0767_icedid.exe
-
Size
383KB
-
MD5
b458c7066522e5434ee1b3f379fd0767
-
SHA1
c48ff7f5487a8c91cefbfb2c23f4b3bfc6369aee
-
SHA256
7730ced3cad4e2a80eba4b937484a0270f6028b794b213587e596c53c00b0433
-
SHA512
7802efea67a9c357cf1c588f9aa4cb68d3966051d76eb86f68a7e9d64922319bede670dacf79cc987f86a826b41f4f0c279d660e7c0088179236a18b15604053
-
SSDEEP
6144:5plrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:5plrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_b458c7066522e5434ee1b3f379fd0767_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_b458c7066522e5434ee1b3f379fd0767_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Schirmer\Addison.exe"C:\Program Files\Schirmer\Addison.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD537f3f9db635355872a1f41db529b11ef
SHA196417639ca6a9e3edf2d7a3d05f8c14bd43309c2
SHA256dfcf5dc872b597ed7bd188e018d6e9d3d0f2a019345252b43118a67ec8af1239
SHA51239fa560e919cf17ffa798fdbeadde8a02933b42e1b5ff09a681e2b7c9517f003182474d5fe542c474a5f62b6d245f6e9a3196a461a018f4e569c749729f5cd1d