Analysis
-
max time kernel
92s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12-03-2024 20:07
General
-
Target
2024-03-12_f1fdb2f08760a657f16a5899257480e2_icedid.exe
-
Size
267KB
-
MD5
f1fdb2f08760a657f16a5899257480e2
-
SHA1
911933820ea33cccbc799ab4577f13c23f974d0e
-
SHA256
e01befea602819b95fe346114a22534fffbc7e3ce11193a1a11d010cf128711b
-
SHA512
7173f85659d710313e9369894bafef86e9034c51a179ebe5d65909743bc1f9e236e8e052709158d3362b9f22106f610c228df74e0c7b0da7121046427a44244a
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_f1fdb2f08760a657f16a5899257480e2_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_f1fdb2f08760a657f16a5899257480e2_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Reducing\theHelp.exe"C:\Program Files\Reducing\theHelp.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
267KB
MD574fa1a6515af001fc6fe9616e04cfed8
SHA1ca34ba704c67735786019c421ef8836dbfc753a6
SHA256c71f75264a668b144407f22b3b56400d4176814a3bbc1e1ab85251e7421ff02a
SHA51284c33664807c3931fea7c5a2d79f67ade339a1228e8aafc80bae6c3d03c8e1d5c5f7036cd62a9636dda570f314d2ab03ca0cc11e47537e89f37b978ba2e4733e