Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18/04/2024, 14:26
General
-
Target
2024-04-18_84fa9e8bba94b4f2f685612aba5bb646_icedid.exe
-
Size
422KB
-
MD5
84fa9e8bba94b4f2f685612aba5bb646
-
SHA1
a1ed922a1a7649a954e6fc5bd4e276d53b45cad9
-
SHA256
615b5bea49e43bcef50966c6a5199e555cc52cfdec8ed7a144bdc6719e624816
-
SHA512
9c10a79d44ae5929330820c5f0fb44e832255e6c53c382045012360ad9a61669cd60207a0823741ab0b33b3e7d6cf0c2c7ca222edadb7be4ae1f16d2f9b81815
-
SSDEEP
12288:gplrVbDdQaqdS/KfraFErH8uB2Wm0SX/Nr5FU:8xRW+Fucuvm0a/
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-18_84fa9e8bba94b4f2f685612aba5bb646_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-18_84fa9e8bba94b4f2f685612aba5bb646_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Enabling\AutoPlay.exe"C:\Program Files\Enabling\AutoPlay.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
422KB
MD57e13b6fb8e2d385654130c9bf287ab3d
SHA11e4b2df216a4e92ae92a48164eeef0a8dfc7b3f9
SHA2569f5c50358429f757dd3524b84bc6607d4fc70c652e8749bd4dce4fbcb19575cc
SHA51200b481b0d2b7f966bbeff8b52ae0e2ff39910cd63431848d036f13c4f2b4b300d6ac49ba6f7493244c2db17821318307de15138e3c98429e8b0a337c47712a56
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB