Analysis
-
max time kernel
160s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
19/04/2024, 00:40
General
-
Target
2024-04-19_c825163ad5341e0eea0698514673012d_icedid.exe
-
Size
275KB
-
MD5
c825163ad5341e0eea0698514673012d
-
SHA1
86510d8c6e4016f77b8766ce36bbe97034e00fa6
-
SHA256
685db07830072a6d11e69cae4b0e4795ee1acceff21ced9af34dfc8ed20daee3
-
SHA512
f70141ad4adee08dc66762f389c54efc34c305950b2d9b65cdec7e03cba768237232fae23e3414377052b3be8c15b061e99267d327ef24b3d1db00586ed635ff
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-19_c825163ad5341e0eea0698514673012d_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-19_c825163ad5341e0eea0698514673012d_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Standard\Custom.exe"C:\Program Files\Standard\Custom.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
275KB
MD5459869a4c254015bde95d48771f2692b
SHA1e093f984fd3369c82775c8ecbcf5e9f331c007d2
SHA2562d25fbe570b9d7868554f49976afe9e0ada92fd545f702d8d45b8b1959d82c98
SHA512a1377dd06ecb937b2948f50e6082656189b43bccf35232896280470e13860df184e36de036911e559dff3ab9879bfcb14c7ac9951574235dbc267870e36c2e28