Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
15/03/2024, 19:56
General
-
Target
2024-03-15_93c6c0e792de17dd7a4aadfe6b81f9b9_icedid.exe
-
Size
418KB
-
MD5
93c6c0e792de17dd7a4aadfe6b81f9b9
-
SHA1
ffe6cbaaf11dc98575316921e92f6db008f7bd72
-
SHA256
0b9d2b8d01f10f4e181374715409d151f88d5107276977030fdee814f0784512
-
SHA512
9dff0d6eb0c7f7f70f1923cfebe1b4afd1b30ec32f271137fa86c901190c8222d0cf5bbf910af7c7ce0ef98fdce63e7854cf88cb0af4c340977681d3efa65183
-
SSDEEP
12288:zplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:1xRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-15_93c6c0e792de17dd7a4aadfe6b81f9b9_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-15_93c6c0e792de17dd7a4aadfe6b81f9b9_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Spanish\Swedish.exe"C:\Program Files\Spanish\Swedish.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD51016df5bed85beae232a732568fb2ea0
SHA1eb36ef78a2dec053cf4cdc0b57496a7430da254f
SHA256176844c652fe79e3f33ac1a3fe01627aaafcd042bd96c15c0fc47c5deedd73ac
SHA512aca3cc6af4f8e636777c8dfa2dbc3bf7d3fa81baaf5a3e7ffb5f6d7bd949c960ef40635eeb91e1fc03c2df8bd117f6c5069f22e02e520a3684f9f5fedf7ba940
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB