Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-04-2024 16:45
General
-
Target
2024-04-16_799ce98ab2bb084ea7e251d1fa5f23ef_icedid.exe
-
Size
2.8MB
-
MD5
799ce98ab2bb084ea7e251d1fa5f23ef
-
SHA1
29f51a08466aef970d25ee8bbf74d0919980229a
-
SHA256
afa4c0eca3070903654c13eb8e72b597d0de899c87f731961e878153eb9752c1
-
SHA512
e5cf0e6188c1948aa93fd75f8af8672f0c873f4d6ea3bad9402f4702b45299c8b017507878e6a66f479ae360a03c88d14fa370509ba9c381497cb85f57c21a3c
-
SSDEEP
49152:ve/vtuWQZcgdfzKzqAfOJvXg+s8KuqGaX0ToIBAUZLYfJ:0FuWQ6QfqSXjJBAUZL
Score
9/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 25 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-16_799ce98ab2bb084ea7e251d1fa5f23ef_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-16_799ce98ab2bb084ea7e251d1fa5f23ef_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
1.1MB
-
Filesize
104KB
-
Filesize
1.1MB
-
Filesize
248KB
-
Filesize
104KB
-
Filesize
1.1MB