Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04/04/2024, 23:22
General
-
Target
2024-04-04_0adf4c19cdef23b9fe745baee5f630e2_icedid.exe
-
Size
283KB
-
MD5
0adf4c19cdef23b9fe745baee5f630e2
-
SHA1
75d01c94ac428e96a8eda1c68541ba8739cb8d1b
-
SHA256
8c82093ee7dd97c92122af41d8376261d25df82ddb2ed6a2dce8a00ba02e5ef4
-
SHA512
50eb5d19e2dd4cded1444a3312dd5e27e2fc8526eb3721086bca8682e1f09ab9f1c6774d06b27ed6ec409344746a3c8be7cd4ca8ce0cfd8d38ebec0d164ab951
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-04_0adf4c19cdef23b9fe745baee5f630e2_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-04_0adf4c19cdef23b9fe745baee5f630e2_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\.exe"C:\Program Files\\.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
283KB
MD557d69de7102bb85dc4182129592da930
SHA1f9927e0d89d16d04454c66d7f0c4b0863e208139
SHA256e77a5021104ccabd60d92155caeaaf4d3858bd14da25b1a13bac80e0fb3f62e9
SHA5129f1073df0feef780ae7226d69ae9e484390464fc3a0111c2708bf8a475ac2f68871674637fa114e2d628a77979c597fc6aac666fb26b20a8bd526c522f8cb005