Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19-03-2024 01:15
General
-
Target
2024-03-19_dd748f51e26916c3a3551d92c5a49b2b_icedid.exe
-
Size
269KB
-
MD5
dd748f51e26916c3a3551d92c5a49b2b
-
SHA1
32d612668ed31e2cfc4b2fc1fda58f8f9b0b0949
-
SHA256
b4d7bd99afa2825ddea44c81049ae5a5b52825826ff11d63d635e17172e525b4
-
SHA512
2de0a0d7b3eb42169276ab37fdffe8c003bc423d0a9938769f04a6d25f410d52f9a21c45654d636b395afacdab688b2c9e4a2b0710600d514708d69ee160f200
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_dd748f51e26916c3a3551d92c5a49b2b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_dd748f51e26916c3a3551d92c5a49b2b_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Framework\skipto.exe"C:\Program Files\Framework\skipto.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
269KB
MD56563040dc0a3c631ec8632f1ce6ba8af
SHA112e0da0d43a9c5eb838e95e83fe94943cb6004e1
SHA25641f3dff261fd0e74b6db9ffec1caac22592ab074b0f375ecbe94d457ab39681f
SHA512f4102434dc809183ef906899e7657b883e694baeeb5ebe1e1686c1c1e1da3208264768d273b2db1a04b043b0b9e995424bab254339a83a16509827240a516a79