Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 21:47
General
-
Target
2024-04-10_dfc40e475ced1f9c4f6643765762bb68_icedid.exe
-
Size
379KB
-
MD5
dfc40e475ced1f9c4f6643765762bb68
-
SHA1
74997185dfc06e8f386f32de4ecc8910e7de88e1
-
SHA256
b219e08829c7cfb2c250c12adbd4f096113932f2fed27cb7d8f5fe514fe3cb40
-
SHA512
1c2712c2eff2b0a4497ee44b2829d0c716c1c307c134e3975c3a4be27358aa4456ee29108710d11758a607629ea643fcef7d5446eb797f4e4bf81be383a15685
-
SSDEEP
6144:DplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:DplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-10_dfc40e475ced1f9c4f6643765762bb68_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-10_dfc40e475ced1f9c4f6643765762bb68_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Version\Standard.exe"C:\Program Files\Version\Standard.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
379KB
MD53a36406428092e53ec3eccc014dd6e19
SHA1f7ed0a1bcde5a443dcfdef41838ed5c9dc38801c
SHA2561cf0e253767e2d9c75c9d013a5800190d9ae159cbdf9fba5dbb797b4db5e964a
SHA512f3419f114d4e0e3c883bd474633f09db7b91d00b48e3560f5dedffdd46c18122bf1d0c87fa881104a65dbb408582d6d169332b3d76665a69f8c072aa83d8e152