Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26/03/2024, 11:53
General
-
Target
2024-03-26_b004279e52da485fc518d07fb1a5ec02_icedid.exe
-
Size
388KB
-
MD5
b004279e52da485fc518d07fb1a5ec02
-
SHA1
44deff1ae39ad918efb2c6201c298045b3d36981
-
SHA256
08793c4cec19f0ebba1eaba9b2a42f34ad404c73d4b082abafb99bfefdf4e3f2
-
SHA512
58b84e3d60eeae648b79351c6a89c25f1c1b7cc01d9dfbffbe28680eb28e0ff5fa6b5aa884d5b506c08909c9b30029333c48c2ac6de7f876cbd344e34c729b21
-
SSDEEP
12288:/plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:RxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_b004279e52da485fc518d07fb1a5ec02_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_b004279e52da485fc518d07fb1a5ec02_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Inside\Education.exe"C:\Program Files\Inside\Education.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
389KB
MD5b560349ef1e7af7e37b0b39c374ddedf
SHA1267cee1fd23c73f5462b47b6b638916b37f6fde7
SHA2562fb703c236f4600e5fe1872b35ef834b7fbdf694cab84e8b680da2ee870b9c18
SHA5121acede7d3c41c651271a71745992a5e2de753d8a176fde69842d42efdf3069c7e21872b99ee383b2f36221eab52152932d8161a5a994339c232818bbc2f0126b