Analysis
-
max time kernel
93s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15-05-2024 20:05
General
-
Target
2024-05-15_b6b60e84ca48c1a8ab2a682bb266d66e_icedid.exe
-
Size
586KB
-
MD5
b6b60e84ca48c1a8ab2a682bb266d66e
-
SHA1
e227d9daa701cb9548241f2941f030af00599100
-
SHA256
698d2b3fcf5cae47358a08c02375c77b29360bf176e42b1e2f7d77bbb6eb5e58
-
SHA512
4a21ad8a0fe14a5b643171a5b6dd718dbc1421a8ea4fa03d50e073659185fc4cd9c3fa816c2711fd4aa6e5daf0c8a236301e1075bed4a73901358fabaaedce4f
-
SSDEEP
12288:MplrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:YxR1+FCcuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-15_b6b60e84ca48c1a8ab2a682bb266d66e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-15_b6b60e84ca48c1a8ab2a682bb266d66e_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\instead\previous.exe"C:\Program Files\instead\previous.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
586KB
MD598b2fe2fadb22d7023fd2223850d4858
SHA1b0ebcdf1fc013eb6678e26c1a29f2a3069305a04
SHA256fa8da0562dac706568ed28cd2d2985f1f359bfc9f6d76e1cab2ebcbd98d87bba
SHA512970049d90ee474a6489388048ee8c0e84d2c6db9095a98c686611c5bad13ec2dd67b05331c9b3a6387627224800b64aa33084f2f6661c688a6929f3c77e61207
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB