Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
14-03-2024 00:33
General
-
Target
2024-03-14_4915ec578301c2077a0d18528e26743e_icedid.exe
-
Size
418KB
-
MD5
4915ec578301c2077a0d18528e26743e
-
SHA1
917a95b45f64db38e78d18ab130129bf1502d151
-
SHA256
a5697b362b9edb270bf64a08d6454b5313cb4daafa4f8674a0cbda8c7da0aa3b
-
SHA512
81ff3af25a40a0554dc5a879a113b0cae68f6c2925d839a5c40838a93011713207391c2e0dd93ff19e1e44d1b07f4f912d061b6ace98c92b2e802e062f1b7f07
-
SSDEEP
12288:QplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:sxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-14_4915ec578301c2077a0d18528e26743e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-14_4915ec578301c2077a0d18528e26743e_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\components\existing.exe"C:\Program Files\components\existing.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD5746ff55df0917c9d9312f362271a84c0
SHA16265b72e0e613d14b2114c2d3e251b813c425b0c
SHA256392d30755234746ffdedb3f492587ac4061868682b2d57078109cbea1becc8b3
SHA5127f964ca4e462569d3aadbbdefccf12ccf1ae7c5a7b040eaddd9dc7e070471e1a7b3f29fab30d17f1de58d61139425f8587ac37c8c8f864c42409908a4ad9ff5c
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB