Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15-03-2024 19:56
General
-
Target
2024-03-15_93c6c0e792de17dd7a4aadfe6b81f9b9_icedid.exe
-
Size
418KB
-
MD5
93c6c0e792de17dd7a4aadfe6b81f9b9
-
SHA1
ffe6cbaaf11dc98575316921e92f6db008f7bd72
-
SHA256
0b9d2b8d01f10f4e181374715409d151f88d5107276977030fdee814f0784512
-
SHA512
9dff0d6eb0c7f7f70f1923cfebe1b4afd1b30ec32f271137fa86c901190c8222d0cf5bbf910af7c7ce0ef98fdce63e7854cf88cb0af4c340977681d3efa65183
-
SSDEEP
12288:zplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:1xRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-15_93c6c0e792de17dd7a4aadfe6b81f9b9_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-15_93c6c0e792de17dd7a4aadfe6b81f9b9_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Spanish\Swedish.exe"C:\Program Files\Spanish\Swedish.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD519d82113474fbe7fdfb9a3fb3dc30e4c
SHA11e44dd1098b0e1c8313f15d177f60be97e4cb36f
SHA25613a82e2101c37c7e417f86fbc9bca0c60f05735d6f427c8f78495ab0f46cf325
SHA512c3e0dd6348f876c21b0888ee485f45a146002761be87e20b30f0876b1b3ad35892b2c6c238c1b5e8f6ab59e4a735a35f26327d3bfbdb4b12c0f689aa3f8f7afb
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB