Analysis
-
max time kernel
174s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
15/03/2024, 19:44
General
-
Target
2024-03-15_0a88c99773257986b90e5c42610a985a_icedid.exe
-
Size
321KB
-
MD5
0a88c99773257986b90e5c42610a985a
-
SHA1
244cc77a34a4ae1d8a8769b006ed74501c395da4
-
SHA256
81e76b2fc1199486e628a3cb436de321147ed753a00eb432e1f260f85767943c
-
SHA512
01f3370bc6c603baf0842771f22946b1edd03573f5b1e4130382a9359baf391636557d0c3759acd35ac94a73028e196d001d88857f2fbf86bce0c4e86a314958
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-15_0a88c99773257986b90e5c42610a985a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-15_0a88c99773257986b90e5c42610a985a_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\instead\previous.exe"C:\Program Files\instead\previous.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
322KB
MD57ba6cfa33ba45d4937e6c7b7c172dc91
SHA11ac258fa5847a765c1367dfcb0120dc2c5f39ab4
SHA25640c323be664f6c47bf7a24879e6023d1d29152cf063c2e8d6565bc57fb0aaac3
SHA512709f3a3d650e461806f4befbcbc6ed89e2395c5b1cff838e8f4db689d3b1869a50b23f22e6c93186b248e936c727a8a24151493079d5d2293a9a44b7236afc9d