Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
24/04/2024, 07:23
General
-
Target
2024-04-24_2667d1788fd49e3b1d94fb9d2e08f1f5_icedid.exe
-
Size
18.9MB
-
MD5
2667d1788fd49e3b1d94fb9d2e08f1f5
-
SHA1
48b8befa4241f9c90e238d976540f7de71434a39
-
SHA256
940fb53440a8f9176d9f0de6b8248872a407fc944d58c4653466254062681b51
-
SHA512
a3615991dc354a45fb4f61bd93a72d1462fe3abdbf11b585f961e8b7549f99b66bd305d4c22376bff1fa0a0047af13f6c710c501902b11ba6c2f50adaa347be0
-
SSDEEP
393216:RJVgCOdN4+jtXcyy0fdvhRWQkDJxJY2kuCXz:8RcKvEPxPy
Score
9/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-24_2667d1788fd49e3b1d94fb9d2e08f1f5_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-24_2667d1788fd49e3b1d94fb9d2e08f1f5_icedid.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 9362⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4672 -ip 46721⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.4MB
-
Filesize
1.4MB