Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19-03-2024 01:17
General
-
Target
2024-03-19_e2920d94136399a9aa504d12803bfe68_icedid.exe
-
Size
269KB
-
MD5
e2920d94136399a9aa504d12803bfe68
-
SHA1
971f60526378e72489abee5d7b77370044567305
-
SHA256
da5ebf930880178e98c0d31c9f9beb2f06863768377ae46e32091f840cf7a912
-
SHA512
8f4700466b06c3ebcba4ad62f78ade619af2e8273a0380863873df25d91eb93474f097457841f85b6bdcd8f45ce458d262f94352a94580f1a50322def61219ac
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_e2920d94136399a9aa504d12803bfe68_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_e2920d94136399a9aa504d12803bfe68_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\points\root.exe"C:\Program Files\points\root.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
269KB
MD5909bdf29c4990d14f52122333d1c0738
SHA1855bcf7232bde02c2434e65fcf8b7db378947a64
SHA2561cf63a96835296e7e729e4944d3be6a398997f05f9c0da42eef317de003f0a54
SHA5126f6955c5f932305e035ca9bf7dba10ec2e12646c62a2f0745bc8ccaa2b36849c26cb13cb37a8d32aa6927e0649382b444384ea498634cb466992f5752b7635b9