Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20/04/2024, 05:40
General
-
Target
2024-04-20_acdf3c7a86ce3dd28fe29a6a0f6fcb8d_icedid.exe
-
Size
274KB
-
MD5
acdf3c7a86ce3dd28fe29a6a0f6fcb8d
-
SHA1
4f71feee3e7b9792377a04f308c97ac4498a8dda
-
SHA256
827e8f4d29ab8b619c76b6f0772302247c4c5dd75ee7779c1b0cfccb3b16e1b2
-
SHA512
e352886e6b07606b03086eb0afd44a1fceaf78910f3d1eb328f8dfb941537ac07e83af9a233851519810f47abbcb49b2c2024a70d64dc41cf0899ef62b92213e
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-20_acdf3c7a86ce3dd28fe29a6a0f6fcb8d_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-20_acdf3c7a86ce3dd28fe29a6a0f6fcb8d_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Checking\Installed.exe"C:\Program Files\Checking\Installed.exe" "33201"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
274KB
MD53f7b7b6e82dce7beb3d7c5774c962a72
SHA16ffbaf792b77532ca4fa8f3bec1c8562c27d8a56
SHA25655da0331dc7a600de3e520b7c1444d32a4df66e5127aa0a52301541e72f9fa1a
SHA512cb95e75cba4d54c96183b9bde87a674c16495d311d69df927d798b4945f5b7427e635b1f3d3ac08b64a9bf967d785116e925a223fb2bf9494435c886877af0da