Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09-04-2024 04:38
General
-
Target
2024-04-09_faa1fe020c5a9afa7e7052d6ea26cc05_icedid.exe
-
Size
421KB
-
MD5
faa1fe020c5a9afa7e7052d6ea26cc05
-
SHA1
7a8fc7278f5630e15e816a5a8afd0b5e27e821ed
-
SHA256
120a3f7c5906b8236786f219137f5340b61c56663f64388bb7a26b8b9fae5684
-
SHA512
876ad149ca41bccd4323ecddef3f4f1a33021dc0bb45fa7b73003e5f8d22805cdf0e14a912abacd60e0f6c43cbca2ab468c4960344e13ee8a35cb5b72c4ae50f
-
SSDEEP
12288:/plrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:RxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_faa1fe020c5a9afa7e7052d6ea26cc05_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_faa1fe020c5a9afa7e7052d6ea26cc05_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\platforms\distribution.exe"C:\Program Files\platforms\distribution.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
421KB
MD50d694f48da19cb9e11d00a295c20c99d
SHA16023e8b299fd7f2012c06fb4bf29b36dea7b9e5c
SHA256cc0d7f0f5abed229713603d7f0f68e9272da43370b9f1f42cf53010673eda494
SHA5127fca527e9824d2db19252924165a158810752c57551ab39e4e5802ee8fe40f50306bdec17eb75fdb9508000fee8a046a6823afee4d4db24a9887487ae00ce285
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB