Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
13-03-2024 01:38
General
-
Target
2024-03-13_5162238617368a0dadf511a69fe1051b_icedid.exe
-
Size
431KB
-
MD5
5162238617368a0dadf511a69fe1051b
-
SHA1
a530058ab036218c22d07f9eb47162c5fd1b833c
-
SHA256
6d751999263b77588f9c5f7e7c44d03acb04f6e2d8c71866eb50c2886d107315
-
SHA512
838f070f6ab4390b8c6043dafcb7042aedd0357988a573965bd6a4c2159b677f120b3d4919d2df36e1be92ccdb08209217e72eb61389f276d2ee0cad6c3d4665
-
SSDEEP
12288:fplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:xxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-13_5162238617368a0dadf511a69fe1051b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-13_5162238617368a0dadf511a69fe1051b_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Panel\Autorun.exe"C:\Program Files\Panel\Autorun.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
431KB
MD5ecfa07947ec585b7df5c724edf892a1e
SHA11535fe5b2e51a1c6a9aa74cd485d1d1321a197a2
SHA256b07342443e535a5297a1637c3d4f9e0a5f6b629072c3fba0a67181ce31a618dd
SHA5121c08cf5631be9c6d794a6912cd55f9e80211471ed049a3188b998255c8165833a623d8d197e18db1e67045e13a19cf4220fa34811ff468b63ee4ae895be819db