Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12-03-2024 12:39
General
-
Target
2024-03-12_84fbfb5558967e44ac5892db1cb03d8a_icedid.exe
-
Size
416KB
-
MD5
84fbfb5558967e44ac5892db1cb03d8a
-
SHA1
04068b57389539943264e5ef6118f5aedb805f00
-
SHA256
65674218b4986c11c546d904f24f0c0ca14976026e775f7d818e51597a80386e
-
SHA512
500485ad5c2f34d3dfc666c415976418cbae5ecedefec127df8e1adbcd5ec5e73951f95d0cfcea672814a5ede5657e6e2a783c7d4da2ccf86ed013c882a7fefe
-
SSDEEP
12288:JplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:LxRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_84fbfb5558967e44ac5892db1cb03d8a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_84fbfb5558967e44ac5892db1cb03d8a_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Morgan\Kaufmann.exe"C:\Program Files\Morgan\Kaufmann.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
417KB
MD532dc5818fd2d8f24a809f31bb776a0c2
SHA16fd6ec25b7031734a18b0634605d1ec406a8487e
SHA256be49d171aa0b0e4bc2a45d1a11f10ac4cd57b3b273e35deb3c727441010b8075
SHA5123436895b410f88e43b2a162d89878de40d0aeafc96ba338d08dfa1497c4c0369dc95bf0df33f638669b2cf6464d21264ee330bcca02947f531f8703e0f9bce0c
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB