Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19/03/2024, 00:54
General
-
Target
2024-03-19_911c6908050bde632be9f77aa78abd13_icedid.exe
-
Size
418KB
-
MD5
911c6908050bde632be9f77aa78abd13
-
SHA1
b47d885d6000ad4005bb444d5fc525dc107c3280
-
SHA256
b777df59e9948eb3d99c05733bfecf5119111cd7191ac3fdcc7c78e79e909bf2
-
SHA512
09a497b3a0c5a10663d5e9116a1dbc575142506fd98bdfef43f4449caa762047354ea737fa1511552a1675a9059abe1045a12ca09e5f7160f594fbf54bd311e1
-
SSDEEP
12288:xplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:DxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_911c6908050bde632be9f77aa78abd13_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_911c6908050bde632be9f77aa78abd13_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Diagnostic\Tool.exe"C:\Program Files\Diagnostic\Tool.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD5d0dd35f317469fbf0983b15abd604de6
SHA1e6ff1b736de12c97c45dd6b2076a1367a575d011
SHA2560b0ca661186bfd27ef680aafbb3bba25a25a638113dcb6124912c89fff15fa48
SHA5123b72286941dd5dc564b945731d0ac991a38416b1e5f5af56631654eff4b190b4ce28f148773a4a324baf161503d0c1d36b78d9d0494850edf34ff619987bedff
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB