Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/04/2024, 00:47
General
-
Target
2024-04-16_eceab8823be3bbef291f9098ecee4391_icedid.exe
-
Size
396KB
-
MD5
eceab8823be3bbef291f9098ecee4391
-
SHA1
35ca19ca7fa9fd1485e31dd3e9fe5165b2fc7588
-
SHA256
58bf7a568834b6f32d46256c3571fde46ab10c62048440ed77c13a6f9f4937be
-
SHA512
b5f568eba26087003f02c783e09f3f34dd5a9e2dec46781a6d9087161390a2116b60e7ed1a24e054f1da82abc054af82e780450851b55cdf952e90597ed99824
-
SSDEEP
12288:hplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:zxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-16_eceab8823be3bbef291f9098ecee4391_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-16_eceab8823be3bbef291f9098ecee4391_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\application\make.exe"C:\Program Files\application\make.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
396KB
MD5238472b3280e3ceec188f01b8a257c95
SHA134b239799b0082dee3f1804ed67b5b5fafc2bc2d
SHA2561e57b59f2eedca5c35e44279c1d88e04b2b5c2654645b68a774bc1b49db9d7e2
SHA512f4bfd75c62834d062c87348dbc480a55c587d2ae2957fe1866d48433e2d29e2c17b4da78aa40a876b644a0407bc8c9bf0440fee9719c5cb3584175c7c16278bc