Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-04-2024 20:21
General
-
Target
2024-04-22_d288dbe7099dd59dbdfa9ff9058cbc6f_icedid.exe
-
Size
274KB
-
MD5
d288dbe7099dd59dbdfa9ff9058cbc6f
-
SHA1
1951f7f70d710a1a8bb74459df8952c94847dc9a
-
SHA256
82960e44e34c3b379e182a95ca7e3835d4b1d085bf3bcb53e204a9b021110945
-
SHA512
16947eb913f6afbccab1a5e1f07be6c76135be2463b4fb268a810d425e98b3789c077897e675b018336b84a88cf7fd86fe70065321d9352b99d5108e02f494d5
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_d288dbe7099dd59dbdfa9ff9058cbc6f_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_d288dbe7099dd59dbdfa9ff9058cbc6f_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Diagnostic\Tool.exe"C:\Program Files\Diagnostic\Tool.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
274KB
MD56cfac8141ff572c8ef2c10e24cc4dd18
SHA14f6ab72ef48f3ef73da95f09aab4bf84dd953639
SHA2568f2fb2a6b830e4f8724c03280b29917c945796e393d4f8b900a23635e8bc93dc
SHA512121fde4dbb7deb4094646fd42f710167a566e15e835073f7aeab3e0d735c3ff767dc05ac308e3dafd116818c6ad32edeb4e32b0e007e9eb684db13cee844be81