Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24/04/2024, 02:37
General
-
Target
2024-04-24_c64ab1568e09721ad502a53cdacbe5ed_icedid.exe
-
Size
389KB
-
MD5
c64ab1568e09721ad502a53cdacbe5ed
-
SHA1
b92705206f9482adca2165018ab105c38928d3b8
-
SHA256
cd00e6830e57f374d274d9f2e850a867ce41127e216d30d81bedfb0c04cc5de3
-
SHA512
f10ea80db969c7eeb358c31848a84dc4c288373c4c228dced43dbb8952ee10eec78d004972dc66c0be38262fcf5fe240262dfe8f1f5b37044ececebdcda92dd2
-
SSDEEP
12288:GplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:ixRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-24_c64ab1568e09721ad502a53cdacbe5ed_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-24_c64ab1568e09721ad502a53cdacbe5ed_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Suppress\status.exe"C:\Program Files\Suppress\status.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
390KB
MD5c9947689a959fc9567327e870d0617e4
SHA19e0f03809b8e5e4031811d4a89f21cd35ea72697
SHA25635f0ea87a32fe699c3bccee404a71446a6963c5f52ea9062581728d8c59c5279
SHA5129dd70edd0c06ee5b72125d3054efa9a62f18f10b7ed49997b4e332619fe5bcf9b842421520d534ea1829a41647098e21041881a4a5ee314eece1c8bad67a3e81