Analysis
-
max time kernel
143s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
07-05-2024 23:21
General
-
Target
2024-05-07_157bedf774b4e6671886778252c1921b_icedid.exe
-
Size
587KB
-
MD5
157bedf774b4e6671886778252c1921b
-
SHA1
a407c575551b3a6501cc96a9bf805cd8aed13e5d
-
SHA256
614bedc42e3e99bcc8f6acb7ceaa089e06b274594672cd05976a21c6fad027aa
-
SHA512
a2e02aa916e8f29cf1681cfa5e993c6f908795fbf91c134c740c7a85ae7b83521b63d4752856e92cce0133d9c28af8472f1e57842c948511b338055c1d05d8f2
-
SSDEEP
12288:EplrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:AxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-07_157bedf774b4e6671886778252c1921b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-07_157bedf774b4e6671886778252c1921b_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\findout\Diagnostic.exe"C:\Program Files\findout\Diagnostic.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD5af4dcc5f04279323772453ab1ddf74e2
SHA141a8446f33f33704dfb53f64efb8fd19a0e28014
SHA256685a9b34a0d7f0c98e13e0a5c97a54d7f399884ebb9f40f22ad8848ff434afaf
SHA512570d04857525acf06f137a67452f68cd8efe027e12046b34ab3f242983f467c5a21d8ffed2bf35ba3f92e7bc043b0aeda940cbdc1d209c5b6fc8a27037ce12d1
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB