Analysis
-
max time kernel
90s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
06-04-2024 03:51
General
-
Target
2024-04-06_66e2c31f61a68a0c6aae52641d6fe683_icedid.exe
-
Size
422KB
-
MD5
66e2c31f61a68a0c6aae52641d6fe683
-
SHA1
46372a57fe8e0217c3045ac1bf889315b2d1347d
-
SHA256
70aca7dfa7e5ec4ac219382c57c86015f48924c0aeae758d8d2ce78d370aaa50
-
SHA512
85dce2016916749447a59b1eeb66f2345c8a9c8f5fad52b25d3981036043827bcb8563b109394a93071b3e2c303f70681e7852b544df8b7d925f7d99531a27bd
-
SSDEEP
12288:4plrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:kxRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-06_66e2c31f61a68a0c6aae52641d6fe683_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-06_66e2c31f61a68a0c6aae52641d6fe683_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\present\alternatives.exe"C:\Program Files\present\alternatives.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
422KB
MD57e0a52c9988d31b4a9699f47ee09242e
SHA1bc1109652eede9b5e0038cbbe56136debaefd6ce
SHA2562c3bb351014733d27517487f720eac67370c5f4135a48b5d4276259b9b1a9767
SHA512385e815a81f26a404c077536b68c77d501bdc603e4b97e141efb43b263b456301e0224e1311ebd006c11c5eb91f28d95093efb9d76f6f891a0b8ceedaeda13fc
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB