Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
14/05/2024, 17:44
General
-
Target
2024-05-14_03b678d5cb34e5ef105496d8210ce7e7_hacktools_icedid.exe
-
Size
19.9MB
-
MD5
03b678d5cb34e5ef105496d8210ce7e7
-
SHA1
7417567665e2c85f9cebc0aec0a0779b40d08126
-
SHA256
f95427ba1d2b20d8f2b69d7e6ac0e4a3d4bbfabee4044dccd8f5e7bac550b0ba
-
SHA512
de3e23b3fdb92678afc7be3c28efe2267dd8aa56049682d733b59e053be92da131baf362640eaddd81b7d7baceef1cd3db079df09c5f508e41fce3d5853840e2
-
SSDEEP
393216:/xrc864yXM7TOC72cThkIRWwE2r6KWqhWql:/qXc6GhDx6KWqhWql
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-14_03b678d5cb34e5ef105496d8210ce7e7_hacktools_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-14_03b678d5cb34e5ef105496d8210ce7e7_hacktools_icedid.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5c091a823c41bb5bc6c5a1ab6c926504c
SHA17b358a9211f8f5e3ce22f38075caf605fc4d2032
SHA256c58334cb8bd8e7a2c998d0717fff8bacbd873ab949e40a0e5f053dd51b67cca4
SHA512742ea0c78115f602c16a793d6d34ea97f0ff8bd4fc1ab28b90b7b7a3dc6fe6b921615ce97c0b23839e18f632d8e09f4319052de532dd9d31b70a22f12b7cc68d