Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
13/03/2024, 18:25
General
-
Target
2024-03-13_1debf0a8aa537b46745f1eb3891f966a_icedid.exe
-
Size
269KB
-
MD5
1debf0a8aa537b46745f1eb3891f966a
-
SHA1
7d4c33829242fa3e763e95fcd6548eb912cfac8a
-
SHA256
2bfd59dc258867ab1b490043de05a815ead4d2323c1e8cd8b64c3c92a216266c
-
SHA512
d53f9207d452796064ea79ffc112cf2c58e6667891e6f2e47a8e35030eca376bc4f3b6e53ee1d6e001d42653d59de39abddd14f55f15df951c8067f856044b53
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-13_1debf0a8aa537b46745f1eb3891f966a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-13_1debf0a8aa537b46745f1eb3891f966a_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Panel\Autorun.exe"C:\Program Files\Panel\Autorun.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
269KB
MD58d8b2773abbc1ee4a636295e8b87a329
SHA15a19af289726b60d6c0b6ac49aa097d651b806f0
SHA25668183e0b131c5673e60ebaa728744c1231dbe37bbc89a6b3aa747071b3f55d5a
SHA5121fbef0adcc29dc1c6648773e64a24ca5444033ccc7f055bd458620a52ea7fcdefa822412a9dc53dba847b79182f25717a2dda570e3f8d4a89cbbe79c1f3607bc