Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
20-05-2024 20:43
General
-
Target
2024-05-20_21db065b5d085495fc3a8bc689dde148_icedid.exe
-
Size
587KB
-
MD5
21db065b5d085495fc3a8bc689dde148
-
SHA1
7d9e79fb80e35340efc2ce7d4d221bbd6d123df8
-
SHA256
1b234d641fde39bc26d5701d64f59ab8a505a3748d4ff90d298f97def8a2e68b
-
SHA512
9f060f616a29dd2e67e7f5b00397399bb5c063ad36e44dabe9a20f3062462b7a551afa61e93446f6716d948079ad47a2daab1e6d527619c8ddf70edf16894130
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:fxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-20_21db065b5d085495fc3a8bc689dde148_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-20_21db065b5d085495fc3a8bc689dde148_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\option\silent.exe"C:\Program Files\option\silent.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD5a7beeaa857efee99334f0475e94a6bc0
SHA1f5f976aa6b60baaa9f2dcdab3f4ef461a8fbaf9e
SHA256b785d973f465f7a8924575dd3e3df4960db3f1f741e3cb8e10e9dbc30996e3dc
SHA5125c370f4cd6ba1ca443af3b0290b3b6f3dd597ed95854cd7806834496d8b319902f4c994475e235d8df364448f59f54c9960cf403bc49043cd8a9e9bc7edab286
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB