Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/04/2024, 12:32
General
-
Target
2024-04-05_694184efe5d798a97d360757c28d730b_icedid.exe
-
Size
270KB
-
MD5
694184efe5d798a97d360757c28d730b
-
SHA1
97308e4d491648a192774f2b42759c2a5c70cbbc
-
SHA256
6e26067a894cad2257ca8d42fe908859cfef0184517f33270b449c4869f5a8d2
-
SHA512
6953e364ff9a59f785b11fc0b5886cfc0f03ebbef433df6efbd7599ce36a0edd7d3fd36965ca57e5b79b5902932871af6f654796dc0bbdef30acacff2b6e0526
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-05_694184efe5d798a97d360757c28d730b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-05_694184efe5d798a97d360757c28d730b_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Schirmer\Addison.exe"C:\Program Files\Schirmer\Addison.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
271KB
MD5bb93f85bc679ffc95e7faf7908a04078
SHA132634aa80bc845e97483301a8cc7f108db8bfe18
SHA2562fd7615b4214ebe2847b03ef2edefdd390e6daf88534dab63213751447ef31e9
SHA512cd3b621ffca7f76ddb477e8cc1f96d8523bd8bfeffa41d2961822e800a985f1aa9de4adb500bde583a5d34823128a0c133ce4f9e37711df7788be0738c3c144e