Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04/04/2024, 22:32
General
-
Target
2024-04-04_a12c0bb7634e02845954a5d46e2b7b62_icedid.exe
-
Size
429KB
-
MD5
a12c0bb7634e02845954a5d46e2b7b62
-
SHA1
731d32b85b3a75196e7cb4234c7abf3737428a1b
-
SHA256
848558271d6f247d15c6522db0e9c00ccee906b2591aa94338d3392c4c991955
-
SHA512
0254bac22cad17df817db59d4ea2f99042039f6d68a0c0b202f3ae4151f56bfe831fcf20f1f74c7114126f1918436aa1ecf8929e73bd262db5cfea7f6b0b8899
-
SSDEEP
12288:YplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:ExRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-04_a12c0bb7634e02845954a5d46e2b7b62_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-04_a12c0bb7634e02845954a5d46e2b7b62_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\recommend\footprint.exe"C:\Program Files\recommend\footprint.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
430KB
MD5cbdf934476fbb7c219c41b0c3c3883f7
SHA1d014fa372ebc4a7a2af74d4b0c57c8a983ad66b9
SHA2567b87979534df9b6d1cdfb62c859fd4e80c1d4d785a3ced99e92efc68d5872e6d
SHA51287f095d980d3bb9d2273a3fb6f2fc9bf4b6000948e076663b58b781cd6f41aed7b93e2dce01b3f2430d2ec82375a552af4d42bc7c7de57a4235052cbdf5a090d