Overview

overview

10

Static

static

10

2024-04-09...id.exe

windows7-x64

9

2024-04-09...id.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    139s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-04-2024 19:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-09_eddee01464d1d7449f564a7eb364b11b_icedid.exe

  • Size

    1.5MB

  • MD5

    eddee01464d1d7449f564a7eb364b11b

  • SHA1

    a29116910fc2b84ab7f0770337be0e87e36cdac6

  • SHA256

    5243f3789372b44a35836fe8391803e8d7dc057993c1714f90fea60e37781fc5

  • SHA512

    d121dba2bc3d7f861e34fd442037d0e3eefab044d7af9d9d524a6334396e3ba5db580e9bb921ce124e236e0dee73ce0a45f41b626cf45157eacb503766ec1c4c

  • SSDEEP

    24576:Mhd1Dh4O721ZCh0DwPlm0TtrhdsSft14MztiCzaW5AjzReaW5AjzRQMFU:MX0DN0TF1d0VqM

Score
9/10

Malware Config

Signatures

  • Detects executables packed with Enigma 2 IoCs
  • Detects packed executables observed in Molerats 2 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-09_eddee01464d1d7449f564a7eb364b11b_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-09_eddee01464d1d7449f564a7eb364b11b_icedid.exe"
    1⤵
      PID:3184
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3184 -s 528
        2⤵
        • Program crash
        PID:5956
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3184 -ip 3184
      1⤵
        PID:5348
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3996 --field-trial-handle=2280,i,1836084024518340990,18250262151825427757,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:5928

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3184-0-0x0000000000400000-0x0000000000580000-memory.dmp

          Filesize

          1.5MB

          Download

        • memory/3184-1-0x0000000000400000-0x0000000000580000-memory.dmp

          Filesize

          1.5MB

          Download