Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/04/2024, 15:34
General
-
Target
2024-04-16_97039be793748817ab54265015cc92d7_icedid.exe
-
Size
395KB
-
MD5
97039be793748817ab54265015cc92d7
-
SHA1
5ff7234120f44e4f6d180ab404b2a87b9b36ba6d
-
SHA256
dadc339464ccade73196ae93493f73df378d88cdb6131fb07209beefa8e3ec02
-
SHA512
2d725b8d6eb82f9b348b283832b30ed080fbeaca3e11355c149f9fa290b2beb8e051f96b496b2fa7e3e6d2756be28900e79ca933db0850d19f9c2518f697adc6
-
SSDEEP
12288:yplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:+xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-16_97039be793748817ab54265015cc92d7_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-16_97039be793748817ab54265015cc92d7_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\optional\Before.exe"C:\Program Files\optional\Before.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
395KB
MD50a7c8893499e24d1b9b7f621ae5b15d2
SHA1b28c005ca22d68be3a38d51f9ba88b25611a96f1
SHA256f7c5818d318960c94017ad96360bb5fb5c13c75036011b7e313721f4c9eff540
SHA512b078d8a8023e9a6a5279f3c807cf2917727e797dd0fa459f6e41a5423ef260820eccc5a28fea5b2df885772e1e5afe0b87cdda386a0d574440da0c56e77deb91