Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/03/2024, 13:39
General
-
Target
2024-03-28_76cebaef908aecfc90d556054f8bcb42_icedid.exe
-
Size
418KB
-
MD5
76cebaef908aecfc90d556054f8bcb42
-
SHA1
90ee0ea296502b00dfc37cd3e3b9fecb2a457751
-
SHA256
8086e8f17e9742b3daf6420072121e5a4591b0f8b859794bbb1d2bc90700fe9d
-
SHA512
7924c5905d1cd88124da884ec964032fd0c853269b439230859a7ea95c5fc607326a215fec15b222ba5ee4aca7eea942e9c66017bcbd3ec7cba2dd6576d94815
-
SSDEEP
12288:GplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:ixRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-28_76cebaef908aecfc90d556054f8bcb42_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-28_76cebaef908aecfc90d556054f8bcb42_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Inside\Education.exe"C:\Program Files\Inside\Education.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
418KB
MD5e6b7aefc94c905ef57a999936402fac7
SHA1e3fb1b086c5dbd072e98783bf07814a3c66011ae
SHA25685eba930b94a43f9e83e4f7ab86bf5704481da3733f9fe11262ca2d3692b9820
SHA5127729c123b32074c175821e5125920e2b13b0c3b85b2f79e3bda4200bc2a6ff74a21284f3cd13da9c7e6e53ee1f155ca910d08d48dc9bb9ecb2972af8f70b382b
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB