Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19/04/2024, 04:29
General
-
Target
2024-04-19_47d1fc71d16b4cb7c20156ccffc970ad_icedid.exe
-
Size
324KB
-
MD5
47d1fc71d16b4cb7c20156ccffc970ad
-
SHA1
e64686e82a12f38793474237ea5b8cf34f4f7126
-
SHA256
4398e428b129cc566df253af6e6689046ee54a5f2fe5f2ddb9bae58b316cc1ee
-
SHA512
ddd1cd54b81ee1543eea08ba4228ce247f4a62e14ddd0d78948f1dcbc305123bd6cd2d7f0fe01758cb16d0315e6f920cdc516433cfe996aaec99c579c5d6459e
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-19_47d1fc71d16b4cb7c20156ccffc970ad_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-19_47d1fc71d16b4cb7c20156ccffc970ad_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Russian\Spanish.exe"C:\Program Files\Russian\Spanish.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
324KB
MD55cd7a341184ad24964d64d178fde58a6
SHA11454428d080c91228b1551d5ac548f2ade794f8d
SHA256b20e4bd59af543bc29b2233a73241d874f9722226c29a6f430123c7bfcc6f938
SHA5121470b732b293f5f3a29309ca069f62b3843f779efbc83ce68a07cc56072bbdafce8d7190570ef8a2165c3411cd90bb8243e77c71484b64a541c81acecee79d59