Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17-04-2024 10:40
General
-
Target
2024-04-17_7dbf829dd4311b142fb43e30ae9cebc7_icedid.exe
-
Size
419KB
-
MD5
7dbf829dd4311b142fb43e30ae9cebc7
-
SHA1
6db5c09ef3f018021f9819981e849e97f8e9517c
-
SHA256
c25e40e15bad5682fd8483df9e60ce8e01c66ca4088cca24d51d4048b0465def
-
SHA512
560c4373e08ac7333f2c645fecb52a4579961409e9856f7493d0d211e278052e276cbe39ea8c318d726915f90be23dd82832d0d093793e331ca9b8c911de82a3
-
SSDEEP
12288:2plrVbDdQaqdS/ofraFErH8uB2Wm0SX/Nr5FU:SxRQ+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-17_7dbf829dd4311b142fb43e30ae9cebc7_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-17_7dbf829dd4311b142fb43e30ae9cebc7_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Naming\Reducing.exe"C:\Program Files\Naming\Reducing.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
419KB
MD5c6a12521dc15227c2c63cf3f59a22e4c
SHA140c8d1600bd7b7c94518055e80d89581a208752e
SHA25665b2048e9a72598ed1d93cef4d5c4ca7ff53d3ba257d469db7a69d6fd9920b66
SHA51200ee57148b51e71218d048ad94f16bd53bf3d92b5ffff02840d88de86a608bd3f0f91de9012f74182b571253b8b1a699b4884a85f3ec9945b17e8e7802f1d848
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB