Overview

overview

7

Static

static

3

2024-04-29...id.exe

windows7-x64

7

2024-04-29...id.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    67s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-04-2024 00:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-29_85d5439e5b9b81a86908f704c6bf325e_icedid.exe

  • Size

    2.2MB

  • MD5

    85d5439e5b9b81a86908f704c6bf325e

  • SHA1

    1d76f2cc21ddc42014601893efdd68503f5ff51d

  • SHA256

    061108f14dfd3dfe4f50a708e14a17f50ec2baf59cf6d8caee06d9adc162c861

  • SHA512

    9bd345904afac0c0c8678f64d880453bb047df6cd0447a5674df2157c2bb001037f8a34b295b7575fc909ad7aafcf4d7e202c95be91f03a155e70b163ca1a1ba

  • SSDEEP

    24576:dXiEBiT/qgffPvKjVwYm4vUMwIOaf3XHjC7rWCiC/9K8G416Jh1eSvyebYe/G3bd:dfgffPvKjNvUcFHrCb/9H1167jKd

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-29_85d5439e5b9b81a86908f704c6bf325e_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-29_85d5439e5b9b81a86908f704c6bf325e_icedid.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4724
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4724 -s 964
      2⤵
      • Program crash
      PID:3924
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4724 -ip 4724
    1⤵
      PID:1632

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\shis.dll
      Filesize

      199KB

      MD5

      149c9c4ec430e6be010793f582753a88

      SHA1

      9c9d465459299d0204b4449b8ebc55d3c7e23c13

      SHA256

      68318ab70e1f3522c770d6352dbc47f0c85310937befac635104301cd6e91385

      SHA512

      b19cc9b2a052d5d41ca95ad70c777a4acd850d0cbca3d981fb2d4566dadfbc496361f270d30b4e2a90a8b9baa4445099f53c3cccd530674312ef72e22127ee8c

      Download Submit