Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12/03/2024, 12:33
General
-
Target
2024-03-12_4c5a0d11c4e73a85a490c792033b2188_icedid.exe
-
Size
417KB
-
MD5
4c5a0d11c4e73a85a490c792033b2188
-
SHA1
2650c4f6ce6ecd26e6011cdcdc30fbd5d55cdd0d
-
SHA256
095ad57f4efde5ccfd733471d20305f4d2657b6a7a7d12920322550cfad5d4dd
-
SHA512
078ee38544da522e864094f47f90363d83674996bf9007fb951d4d7209bd25edfad424cfa7cb2f3578da01cbf70f55ed0432051c26ef32deadc01d4f582d159a
-
SSDEEP
12288:VplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:HxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_4c5a0d11c4e73a85a490c792033b2188_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_4c5a0d11c4e73a85a490c792033b2188_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\install\jhgsggfh.exe"C:\Program Files\install\jhgsggfh.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD50a64874f1fbc47a8078fcc98b2b77100
SHA1b7739ba405288ebd6104f006bed17cc5fac07362
SHA256d2c56d49311f4eb60157d4686dc0e97420984e8c8274c3e43dbf30027e2f5177
SHA512c5bc8c2fd273d0a44e9b2a5060e6762cfe3a089efb6ae6761d108e5fbe385127d5c05969dd8a2da68dc3bf42a83f68f99a060774c1d8bdc07fc3f40f1f086313
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB