Analysis
-
max time kernel
94s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
17/04/2024, 10:05
General
-
Target
2024-04-17_4ddd0ae0080c379777ea86a54edf31b0_hacktools_icedid.exe
-
Size
15.0MB
-
MD5
4ddd0ae0080c379777ea86a54edf31b0
-
SHA1
603ce2d94927562396f0e07f08b3dbb52280eea3
-
SHA256
74a83906b44e9cbb85d7cb1238a3cf68dab7035a569faec10d8ac37b5140b8aa
-
SHA512
1701c65202ac3bfb06bd8f74b6ae2e6ef2e3c9590f5e53f0a7c92f7d5031c79693bc9cd2b5416856744b162bcd6d7809d77c8d67c491efae0dcbe28e52d3fc1b
-
SSDEEP
196608:2KdPiid4g/vyuGmxYwRqXPpkx+nWibXQg9wnl1AH3pSoIgyXUjCdb5d:2GnSg/S8okxWvgg9wn0HAZguNdbf
Malware Config
Signatures
-
Detects executables packed with VMProtect. 3 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-17_4ddd0ae0080c379777ea86a54edf31b0_hacktools_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-17_4ddd0ae0080c379777ea86a54edf31b0_hacktools_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
MD554da9cb20347baec926b6678f8efb3ab
SHA118ca10861aa561c56666270cca7fd44c73c28d72
SHA256038675d5ee0b22a17a12646ba9cf3fcffd0a2acfb712c1953102671774a82390
SHA512e4608ef1875e2dd46c1352d5e750178ce439725a6b190d37a14decb7e960428841ea3ef5e17488226f9bcfc6d58793cb254f142ba4f54cd316c9cbee50cae77b
-
Filesize
551B
MD5a48b6f9dfc9faf7be06d0375057ff33d
SHA1ecdcd0ea72db524231fb477a841dece4f342a42d
SHA256bf1267a8f7c21cd51db724a4af7e6d335cf4440a301da950839890befd5ca31c
SHA512a5af3a35b9da17b3a2728bf53e60da2136dda5b3f837991ccc5cde0cfb0a07b7b00bc41e1d6a65fa604f8d44653b4c832d3ddf99e4598a974729993fad81b0db
-
Filesize
6.3MB
-
Filesize
4KB
-
Filesize
6.3MB