Overview

overview

7

Static

static

3

2024-03-26...id.exe

windows7-x64

7

2024-03-26...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    134s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240319-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/03/2024, 03:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-26_90a6df3b27ee12c9e6218ef808e0349d_icedid.exe

  • Size

    424KB

  • MD5

    90a6df3b27ee12c9e6218ef808e0349d

  • SHA1

    91cb3443cb375046affd44019ea51f0ac757f6fa

  • SHA256

    209eda4830cee00f57e31d39cef1c19433566bab5d65ff0c2d04f3d39460643b

  • SHA512

    f01a20a3eb5ca9b753b5791db69c0505613a3cb02d4c1db5e9307d18b0bd595ca83ecb09fc2263b6f57988e20e81fe975d9c3ed015f40a9efb2c90e1629e9e0b

  • SSDEEP

    12288:IplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:0xRQ+Fucuvm0as

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-26_90a6df3b27ee12c9e6218ef808e0349d_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-26_90a6df3b27ee12c9e6218ef808e0349d_icedid.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files\prototype\declaration.exe
      "C:\Program Files\prototype\declaration.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:3544
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4252 --field-trial-handle=2224,i,17688331074622862378,73816879873678745,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:2628

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\prototype\declaration.exe
      Filesize

      424KB

      MD5

      a336735043823a55659ebc1e87e1feb0

      SHA1

      630e1bcd37d99da8dba1a08aa7813d03ffc925e7

      SHA256

      23ab5131ff323307ce9a21ea5098d63aee76c2a61984255049df7503d59dc86f

      SHA512

      e690bc3879b680b0ae0d2c55fe03ee373745a5052b881d99871a0adc2e7bd593b444d072484c983ed6928a8b143fcf9fbd3fc1bd5b13939db7423cfb4cb2762b

      Download Submit