Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13-03-2024 00:33
General
-
Target
2024-03-13_73e52ea8316edeba8ceebb93dd929ee4_icedid.exe
-
Size
267KB
-
MD5
73e52ea8316edeba8ceebb93dd929ee4
-
SHA1
c58f8fe7906641820ff1101bb67d3d84f3e40c01
-
SHA256
4245a59518e7504d96a94a69f472fd490a1ffea205cc739861aefad997dc5727
-
SHA512
cc4ffc464ffba9160a3d9c2a4253f3b4e151bb1bfab755f4abd0893e344d20690e5a256ad299625c2fee152d36212d01e5eef62bba041e204e83a9bdcb8f8582
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-13_73e52ea8316edeba8ceebb93dd929ee4_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-13_73e52ea8316edeba8ceebb93dd929ee4_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\and\games.exe"C:\Program Files\and\games.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
267KB
MD52797b834a6f768e551e3494f31c005f1
SHA13b44fcd0ad194b0bfb782385d7d725a07e3f98b6
SHA256c7bc9b8752b9e1ef9ccd1a5113149b0d7694f218fa7acb81e28b9e9d53320320
SHA512ea5af7b974f345bcba867bbc523fc7c00a1ac51a41a225c65e7cb3221cc920d27e83b5fce037b24470dbc373c5a0d746712e40bcbbc9ce7389cc932e1e2c4342