Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/04/2024, 23:36
General
-
Target
2024-04-08_cbc3684845b12fb19c33e7253ff6df38_icedid.exe
-
Size
274KB
-
MD5
cbc3684845b12fb19c33e7253ff6df38
-
SHA1
d398fedefe3be9d203b9de7d7888aac8e874f1d4
-
SHA256
74d8f01d995a4543695692f557067601589d96dd67dbb09c6c2371641b8da093
-
SHA512
d0fb758a13d2a515d5526444d9e14573fc526c8d27278102b04b4e22e2cf9365f1bfe8dc3b54f3cd6863548da9b51d98a845c8b25c91026d33b5cd0d0592875b
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-08_cbc3684845b12fb19c33e7253ff6df38_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-08_cbc3684845b12fb19c33e7253ff6df38_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\several\structures.exe"C:\Program Files\several\structures.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
274KB
MD5f07a6cda2d7768a2ed9083f88defe33e
SHA19d4970dee786445f91a861b0c601807a64c341d4
SHA2562487e55abd2f3e6c7c5e40df6c836ef0992a480d91511c18934f1c1d2852a051
SHA512f5dadaf7fc5ca5aa1208f8828aa6d5675d3c9f9d985801de1877890f1a627381976a849646ab5abb0c649ba9240d15d0d4a482e17dae0df9e719d99a197d8c79