Analysis
-
max time kernel
93s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/04/2024, 01:40
General
-
Target
2024-04-06_9d117a71cb62913b59434f85ab8a91c7_icedid.exe
-
Size
394KB
-
MD5
9d117a71cb62913b59434f85ab8a91c7
-
SHA1
605bd5bda9df1cbefbe594f59ecb1b6a8f9a7b4d
-
SHA256
13fe8fb9558f9c3b011f97118648f97bc2238bddbe233db95712b3407138fcd3
-
SHA512
5541694a8b9fbb4561fba468fe9181a406a98e226a489109dee86c66290f429c8706113bc39349b5d68032fb5b19aa6c581296e4d693c56fa89e84d3aaea69ec
-
SSDEEP
12288:aplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:2xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-06_9d117a71cb62913b59434f85ab8a91c7_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-06_9d117a71cb62913b59434f85ab8a91c7_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\released\optional.exe"C:\Program Files\released\optional.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
394KB
MD55add756bc957ecf4f421ec80e2e4fcdc
SHA134836279df783d6304c8521ea1fb82aab317ef51
SHA2562766b86a0867834efed630d9e030d168326e56c0d82eef6ccc46b54e461cd98d
SHA5128f5e4493025685337203bf3797516248a9bac43405f1ae70ea95e89a7f9f73a6db3babadcf10638cb24cf426902b89be29bfc60fe2b4cfd07f7866b0ff508624