Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
29/03/2024, 03:10
General
-
Target
2024-03-29_7fba5f65551f48cb5fc8c1d737f27796_icedid.exe
-
Size
320KB
-
MD5
7fba5f65551f48cb5fc8c1d737f27796
-
SHA1
833146499ab74a2cd961aad1149f5fbf71bd3bdf
-
SHA256
7d4dee3e369ff68dd156342e7a4fd0e11b0b39795bb8b3aa87b2e5874907b795
-
SHA512
b2f3618a4a6f25fd050e39ccb056c67ba1e48206193c84db70c69ca713b9236970845cd3e58202e28c67f3e62767640a0d491f00b1f0d2b6ee4cac4645de22ea
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-29_7fba5f65551f48cb5fc8c1d737f27796_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-29_7fba5f65551f48cb5fc8c1d737f27796_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\status\novice.exe"C:\Program Files\status\novice.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
MD52caec1adef1614a01bd443d1f71f59d2
SHA1d5fabd488c2eebf4e1cbc5bdea1c429c108eb6c5
SHA2567f19188338775322a8089f3cddf3e3469133a1d1a0d958f0ba68c389d69325f7
SHA51297c2fbaf5c7e64313853af5ee3ee13a0fe2f026d90232d7db1bdc5d9e76a05d290df43c1474f63076f29cce38f90a6963976e2383178dba2d101dc8ec448e809