Analysis
-
max time kernel
55s -
max time network
55s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
29/04/2024, 12:27
General
-
Target
2024-04-29_2beacce012e0ffbee3854cf5ec3064fa_icedid.exe
-
Size
586KB
-
MD5
2beacce012e0ffbee3854cf5ec3064fa
-
SHA1
af1a543e1f60294a43bddce76c496ad91a176c0d
-
SHA256
95925c7679e1111b631d61b1759192f1d35b4ef856ce3f5ae2062bf435dc0df1
-
SHA512
a3483f0b28e6b1098775f8ffdd4846735e4c0abb116e92d8a61f073f5d81e671e9df11ef3433669f77013c2fbea62cc2d4cede05dc3d1c07e74710ce7e9a58ba
-
SSDEEP
12288:WplrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:yxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-29_2beacce012e0ffbee3854cf5ec3064fa_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-29_2beacce012e0ffbee3854cf5ec3064fa_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Custom\Enabling.exe"C:\Program Files\Custom\Enabling.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
586KB
MD5e9c78a24fd4bc9a5f78f048ed4a41805
SHA11d1a27540d12ca89c33404686abf74838378b4dd
SHA256a0900f248994a9d8f97d966f6957ed0b1025f9b81746481cc12b159aa13f5c2b
SHA51297cefd8bcef4e402c643e33bdebc6ebf2862128cfc233f0a7773c52b2570661551648daeacb20f3b0536238203aad21317ead046489cf50b9797178497804077
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB