Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
12/05/2024, 04:33
General
-
Target
2024-05-12_38c221b58b35fa186f633b6502c7b63a_icedid.exe
-
Size
587KB
-
MD5
38c221b58b35fa186f633b6502c7b63a
-
SHA1
d119da6d20e9a5c3be7a71b120ae69b70af47c87
-
SHA256
3e6a0bf3a12a43560920cd301a747a9eb81f55b55f20fefbfebdb7fbab983d8a
-
SHA512
7f1ab31ff983cc6c8826055eb19603957bd6dec53fbfb1b3a692a2a9d9eb2106b19e7e9b3c7c3bbcbca30ff2b383f1086984024dcd9669820752cc59cd63699f
-
SSDEEP
12288:HplrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:pxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-12_38c221b58b35fa186f633b6502c7b63a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-12_38c221b58b35fa186f633b6502c7b63a_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\privileges\install.exe"C:\Program Files\privileges\install.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD591ff3dbede302175aad0a3d57ac85d4d
SHA11a112bee9bcea504b2f5e2231aa218a7d9a79bf7
SHA256186b7043bb5e04b33c06aa069b7b1477878b3e01a5d7fec8b145282edee80ca7
SHA512041b7b38445dc86d1cbf5be775e0a9b7b7271941f2b5949cfb75826e004c9a0562af3bcb7927fd9300a5ec9eb80808d7190a643182e90bbb1346f3d0fa3a9baf
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB