Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12-03-2024 14:41
General
-
Target
2024-03-12_9a7aad9d3c8d8ef3dc7cdd8f32082438_icedid.exe
-
Size
317KB
-
MD5
9a7aad9d3c8d8ef3dc7cdd8f32082438
-
SHA1
51384c880ec0f9a218f7d206a84dcf2380df4489
-
SHA256
5da81df2e1542d8f77c5f52247a585f78ae66b731aa7c50224ea6bfdcdf83673
-
SHA512
9a5535112169cbde77777b217816b9b4044dde71e478694151582f5b108a50bb6ca6f68bc95d64be645acfdf51200dceb2df57232b68e09a2fd66a8f0e217643
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_9a7aad9d3c8d8ef3dc7cdd8f32082438_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_9a7aad9d3c8d8ef3dc7cdd8f32082438_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Diagnostic\Tool.exe"C:\Program Files\Diagnostic\Tool.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
317KB
MD50c83260b96f156a0086ae81e83b4f121
SHA1bf35b2e179118b1a18545668fb6de04510f9308b
SHA256796765cbfd535557cd8e6e531bd3c12b80a89d6898517cba467156d5c19f236f
SHA5129e4fbe70cb21e31cdc43eed14a960e4529714553f077112e4dd9b92b45b8399b9213337960018166e454cd887f6641753d13e7ef61f92429f604f668c314416b