Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06-04-2024 01:08
General
-
Target
2024-04-06_f8ba802861a08232f0998a4d2ef8a09a_icedid.exe
-
Size
1.2MB
-
MD5
f8ba802861a08232f0998a4d2ef8a09a
-
SHA1
194b6227ef0f5000ddc44469471be0099d11ee49
-
SHA256
9b7ea807d6958da7260828ef732115560e0e181eb7518713990174b3c592b1e6
-
SHA512
9774c199675094da428bb7e10a3e40bdc46b18446d3dc718b5510f131ef4a2c4954d242d979be82043eebfb5f4f12f656dfbcc8f051f20bbcdb2fa775ba9ec8f
-
SSDEEP
24576:aq6Nm756OZe0BW89w2pAbFs0SMm4kJq+E:hj6mBWuDAWRMak
Score
9/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 25 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-06_f8ba802861a08232f0998a4d2ef8a09a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-06_f8ba802861a08232f0998a4d2ef8a09a_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB