Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
23/04/2024, 20:45
General
-
Target
2024-04-23_69ca90ccf90ac7db1377ffec42be2ece_icedid.exe
-
Size
586KB
-
MD5
69ca90ccf90ac7db1377ffec42be2ece
-
SHA1
99528e1c327d55fae6642563a60a30bdbd40cd56
-
SHA256
8be9273e6efce8a26481609b08bd68fdbaf8ba748cafef7ce2c903a55ae06c0c
-
SHA512
bdf85fb18f82ad0736d6e6c3d3d73411e01e2b3eb5ba26ad7349260725880007d1dc4ca05b06cc6819648854195fccc8aba8a125f33580a7328b30032d33ec56
-
SSDEEP
12288:2plrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:SxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-23_69ca90ccf90ac7db1377ffec42be2ece_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-23_69ca90ccf90ac7db1377ffec42be2ece_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\recommend\footprint.exe"C:\Program Files\recommend\footprint.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
586KB
MD5d15c7510d55f7fca968a4a219fd40621
SHA1f3eff192138835873781ad09880814faa15bf154
SHA256d00027b4871888a0bb1972512dd04207fbc0bf12d2281bf0cdb6b3b88736814b
SHA512b91ec3b3d375cff8cb1f5ceb226901a24ce42e33e1e79e789f47efb519dc5621e167be2a1cc3cfb7293fcf48384e43cd943023abcaa2cd3157cb8704ee13dd1e
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB