Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
15-03-2024 13:30
General
-
Target
2024-03-15_227d550e106db6816640ae1b41ccf582_icedid.exe
-
Size
383KB
-
MD5
227d550e106db6816640ae1b41ccf582
-
SHA1
b83f0ce27544c500cd0d176c935f46af33e79dbf
-
SHA256
cdde79b1120ad2f39d546fc22719f48082c8c862680a707b42a3e89a98327eee
-
SHA512
71c02d2f9d43b04f3f40c6d1e2b8feea2459f4406790e27493d7d5ae6ca7593e275b623d3a1962b38c11116543ca16ae848db3391cce70d0248284a8e8311810
-
SSDEEP
6144:WplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:WplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-15_227d550e106db6816640ae1b41ccf582_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-15_227d550e106db6816640ae1b41ccf582_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\contained\agreements.exe"C:\Program Files\contained\agreements.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD5dab239946f8ce63f5667ee5761d3025b
SHA167052b51602ef7cdbea1b184c044b6962503aee0
SHA25625dcffd94531601af8a757943b507106a9bb2f4b7e2509938cff02a7675688ef
SHA512c6fc174223b9f742e60c77af9dffd59dae701f58ede7a435744b707724b4d55adea3b0345d5a31a9f139b3501f93cb7830ae2fc06a0abbf1e604e8caaaca7fa4