Analysis
-
max time kernel
122s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
18/04/2024, 14:26
General
-
Target
2024-04-18_84fa9e8bba94b4f2f685612aba5bb646_icedid.exe
-
Size
422KB
-
MD5
84fa9e8bba94b4f2f685612aba5bb646
-
SHA1
a1ed922a1a7649a954e6fc5bd4e276d53b45cad9
-
SHA256
615b5bea49e43bcef50966c6a5199e555cc52cfdec8ed7a144bdc6719e624816
-
SHA512
9c10a79d44ae5929330820c5f0fb44e832255e6c53c382045012360ad9a61669cd60207a0823741ab0b33b3e7d6cf0c2c7ca222edadb7be4ae1f16d2f9b81815
-
SSDEEP
12288:gplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:8xRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-18_84fa9e8bba94b4f2f685612aba5bb646_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-18_84fa9e8bba94b4f2f685612aba5bb646_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Installed\Version.exe"C:\Program Files\Installed\Version.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
422KB
MD53c435d270c61bf64e5af82d26412a235
SHA1a97dccad19661092a8c305ee14d7f03b8d891033
SHA256ee682032b61f44b0e9cbc92ebbf9808105ec7aaef11e09a71d5e06473ca21922
SHA512359965f5b7dead4f1a6d0420f5b9cd4dd2c60cf1411945f4cd20a4ef4e490ee71c2b42a897b60e3fcdc5c31257c1cc594a3af7f878453176eb5c64a981dd9299
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB