Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
26-03-2024 19:57
General
-
Target
2024-03-26_c36a83abc74549a96c9b1a951f11f153_icedid.exe
-
Size
384KB
-
MD5
c36a83abc74549a96c9b1a951f11f153
-
SHA1
bce99a2b13b93c76bb961d51c2916cd1b286ae3d
-
SHA256
cd91181c9043693c36684fe29a8a2859fb075590615a83b304b9c088e164ab4b
-
SHA512
d2c07d0c840130b10b42ad3d1f76b7d50bf20c87ef3ee14bc26683dfb6f9e5e4e3e8e298395333078cdb618979d943c6d8d70fc2f4e4835f694c6123bb131be3
-
SSDEEP
12288:8plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:IxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_c36a83abc74549a96c9b1a951f11f153_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_c36a83abc74549a96c9b1a951f11f153_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\indicate\contain.exe"C:\Program Files\indicate\contain.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5986b8245a9e2b9b7a9614f4eb55ed2a7
SHA106bbc1034aa29d8151863dda389809d45d26b888
SHA256b3d11d9f06b49968dd2d9d5158860c579ac74ea72ca8439eefa76c71586aa088
SHA51213a3b6856d1aa85c5c1f1576c3ad56a7cf125c75b5c8c5cb160c787dc166814da839ab1b26516edf9ca0daa81c41d0d9423e06b387b76001c42d7a230e9651ce