Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
10/04/2024, 08:32
General
-
Target
2024-04-10_56662581d4cb36bfd24b1f1adfd23764_icedid.exe
-
Size
420KB
-
MD5
56662581d4cb36bfd24b1f1adfd23764
-
SHA1
1444ca39a78dcb80a7af2a108b0b3037f76f2501
-
SHA256
07f6e76c1d0497fa82ce14dcaaf85b3aee40ce97f69600a539c823a63f8a916a
-
SHA512
e1edcbbdbe403fe42be30b0acdaa6178077aefe75dc160f85fc3b8ddf2fda5cf62344850678e3adb9014e8e187dbb32c49b5d2058a4ce6a6c326f4a75127685f
-
SSDEEP
12288:XplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:5xRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-10_56662581d4cb36bfd24b1f1adfd23764_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-10_56662581d4cb36bfd24b1f1adfd23764_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\folder\convention.exe"C:\Program Files\folder\convention.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
420KB
MD5823a237d73596e212e43dce44df2dfd8
SHA18d8211dd5348d88d0fee0eb88bc3ea19414d13f4
SHA2561dba784895e8bde607c8a8b7627bcf5c5b69c40d4dcfc3117c27f67d3c3b9797
SHA51295d08c37f72729206c140c0054419d2a6135d0e483fa50c2e0b818a37815f2a3b677eca8011d2dc765488625e74c092cbf5171be80f19e88938420c13074c98f
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB