Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17-04-2024 23:36
General
-
Target
2024-04-17_5a524cc4e7638b44b632a2bdb99d43f4_icedid.exe
-
Size
268KB
-
MD5
5a524cc4e7638b44b632a2bdb99d43f4
-
SHA1
815417055929aec1c0af64b271f9c1591b8e9179
-
SHA256
f4b2ae0f9bd581621d1aa40be401b18f3c6966e68865ab1e1b5f122d328fbc68
-
SHA512
ed89755c2fc3487dd4367c14da386c975a1ba2d583dc9f6705a04d13e083941e406b7ed96f75af5c45f5c22632b4a7f9db6bd7142790b00b704c2423b18be51c
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-17_5a524cc4e7638b44b632a2bdb99d43f4_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-17_5a524cc4e7638b44b632a2bdb99d43f4_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\demonstrates\Dinstall.exe"C:\Program Files\demonstrates\Dinstall.exe" "33201"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
268KB
MD587af7b43462dd919669cfbbda33566fe
SHA1426b374ed4cb3d3f8f7a31b2affa76e048fc3702
SHA256f401fbaeca4edc58f5f274065b306b21a2ced3888ec1152f95fb16cb84d33ec8
SHA5123b758b779e3d5ce73322374bfa3a129eac18595b1535c836674133304c07c1ffcb857a77176c99db5983e2cf5733d231f24622361c6a55449800b600fe469473