Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
15/03/2024, 13:30
General
-
Target
2024-03-15_227d550e106db6816640ae1b41ccf582_icedid.exe
-
Size
383KB
-
MD5
227d550e106db6816640ae1b41ccf582
-
SHA1
b83f0ce27544c500cd0d176c935f46af33e79dbf
-
SHA256
cdde79b1120ad2f39d546fc22719f48082c8c862680a707b42a3e89a98327eee
-
SHA512
71c02d2f9d43b04f3f40c6d1e2b8feea2459f4406790e27493d7d5ae6ca7593e275b623d3a1962b38c11116543ca16ae848db3391cce70d0248284a8e8311810
-
SSDEEP
6144:WplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:WplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-15_227d550e106db6816640ae1b41ccf582_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-15_227d550e106db6816640ae1b41ccf582_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\contained\agreements.exe"C:\Program Files\contained\agreements.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
383KB
MD54dd2a5a8724afe8ff347b3f8b1cc5ce5
SHA133037d5d5827f08cee3dd73e67a3f8beb2b21ac2
SHA2569f770a276daa35bb82255b0eb882a12abdf081a71d2bba9b6220f5e3167ca269
SHA51292383f027f832bcec0cec091ca0d5c00b2d17af6ca5455640b6f79dad43dc19229da548c6479a839b9fc1de5d4283dae09f771db55dbfafbeacb4feb356213c8