Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 18:54

General

  • Target

    2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe

  • Size

    1.5MB

  • MD5

    559e7dbcbce48996b71060be11268b20

  • SHA1

    4a9f3e59f30a92f11690814b1f9a50ec1bd3dea6

  • SHA256

    725576d6fa20d503b93f9775de516eeea730ee59c969cc77740272c496640546

  • SHA512

    136542006f5f27f29cec819a27aeb81a0ab0fcd7f7366c5bef2e627fd2b30afa67a4a3b2d313cacde638dead767ca0370a73a5231b26d09c52b599e4382d0835

  • SSDEEP

    24576:yFGD1jIqL1jdS5v1xh0dJ0hxiXbtCzwU4hLs31hLR:y0DFzjIxhSKShLUhLR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1888-0-0x0000000000250000-0x000000000026D000-memory.dmp

    Filesize

    116KB

  • memory/1888-1-0x0000000000270000-0x000000000028D000-memory.dmp

    Filesize

    116KB

  • memory/1888-5-0x0000000000250000-0x000000000026D000-memory.dmp

    Filesize

    116KB