Analysis
-
max time kernel
91s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
16/04/2024, 11:29
General
-
Target
2024-04-16_8b5ff500e9654a3633266696993a6880_icedid.exe
-
Size
421KB
-
MD5
8b5ff500e9654a3633266696993a6880
-
SHA1
38753df2550f04fdd7dae24f20a9dd09e2b81da8
-
SHA256
e9eee67ca174109aace55094c33ab6d7391003e7d82dd802414d566186d68dde
-
SHA512
5e3cd795e22b85f65aa720eb317786c5574865d6280b2a4822045f12cd8ecf05feaff24b444b1b30cba08de0fd6cc9174f28905723679cb5e3268b59b79c8dc4
-
SSDEEP
12288:MplrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:YxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-16_8b5ff500e9654a3633266696993a6880_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-16_8b5ff500e9654a3633266696993a6880_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\callback\customizing.exe"C:\Program Files\callback\customizing.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
421KB
MD5765e1930f727202854f2a5141581f56c
SHA1cd3557ae6128b8d4546f462586b81a5a0a9bc29e
SHA256852987e461a7f023e907d5f3df14a357b38af6067308018172e124caa242c023
SHA51287cd007549638ac79f1523b1f2c38d5d4957603c113ac3bab3c397501331057f51a8bfb448718d208d0e1cde2fac5bbfe4272b3b0f5312aad7843f9129a9367c
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB