Overview

overview

7

Static

static

3

2024-03-16...id.exe

windows7-x64

7

2024-03-16...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 04:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-16_1f617773e57a03529f2c22440c5d0b65_icedid.exe

  • Size

    378KB

  • MD5

    1f617773e57a03529f2c22440c5d0b65

  • SHA1

    68d2b110f67b0fc70a2f23c809ce2ed6b8e70753

  • SHA256

    58c6816da8a04dd3df842670ae3c4fd4330e438ae49eb9ce6bec2e5dd4b2d37e

  • SHA512

    ad76a427bb1cef1d5acf309547898388e099b9b106044c330cbadd1ee1b6107b69ffc635ce3f96e1a1e03d53b400c4c311629ae5a55a5b33570bd8a89edf9678

  • SSDEEP

    6144:HplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:HplrVbDdQaqdS/ofraFErH8uB2Wm0SXj

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-16_1f617773e57a03529f2c22440c5d0b65_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-16_1f617773e57a03529f2c22440c5d0b65_icedid.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files\indicator\Suppress.exe
      "C:\Program Files\indicator\Suppress.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:2984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Program Files\indicator\Suppress.exe
          Filesize

          378KB

          MD5

          4cf79f711dba8409350085292ecd1ac6

          SHA1

          42d143f3d9ff2fa6c5c8242e9ffba0d7e0760551

          SHA256

          00f7727dd9537b090f26ebc47bc93f1c31da53eaa713c8b9e1c12f6c7ee5cda0

          SHA512

          276cbcac437293047ae5edb23c12372651068c91f340156fa4c9e453f698f71e2998c9636c57d4829f8d530ee32d42e0f624f124adf2662b4ef06ac5b7b8c4f2

          Download Submit