Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/04/2024, 06:28
General
-
Target
2024-04-05_3b47cf02edaf3316f6e2d9752757a406_icedid.exe
-
Size
419KB
-
MD5
3b47cf02edaf3316f6e2d9752757a406
-
SHA1
9f0f2ef10b14c30ed7373998b1db06d061c7d1db
-
SHA256
47256ebb4336c93672dc0bb34862616b3c9d27ad17a774f46d4fee8230ed7389
-
SHA512
549dacf4c21cdbe1f7856be624e73e42047b156f4cbb6ecf567eb59eeb500bdfe9cf1b7785d585ff470f7d406186a19159ec0f4e78a15d6ba4d3ba5125be8933
-
SSDEEP
12288:6plrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:WxRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-05_3b47cf02edaf3316f6e2d9752757a406_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-05_3b47cf02edaf3316f6e2d9752757a406_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Redist\license.exe"C:\Program Files\Redist\license.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
419KB
MD5b1a04c23c11eb959aa7e74cfe4777c53
SHA1f5042d68609a3b1814759455faa34c3f3d60a78b
SHA25687afe0e804499908a7e08604a3a5e5093320ce470c8896f70627b0f088f3de0f
SHA512ccf7fba7ee7fc7d4bb1670955796a8b994a3c8eb352ae0aca75814cf97c65017af844260d178195f2cf1372a01eb58ba6fe84d24052bd73369a777610e550c68
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB