Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
22-05-2024 01:47
General
-
Target
2024-05-22_6d139c106b0ee3755833a99a03eab6f1_icedid.exe
-
Size
587KB
-
MD5
6d139c106b0ee3755833a99a03eab6f1
-
SHA1
e8dae60205674a9b5590aadea341f23631dd81d5
-
SHA256
c06ce723522d5dbfc7c2c05b86533aaf75c69062fcfc1eba278c2bb65ac16651
-
SHA512
8fd9d183cd513148931b90b3dd76c7ee626f4fe097dccd4f2242ced1203002264fc35964e5b6f5a874a04b0a158eaf345c4513f5f30590533d8b89805cc4e2bc
-
SSDEEP
12288:tplrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:PxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-22_6d139c106b0ee3755833a99a03eab6f1_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-22_6d139c106b0ee3755833a99a03eab6f1_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\waysto\findout.exe"C:\Program Files\waysto\findout.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD5205b8ad65ae042b1e480c6515fd32e3d
SHA1af699c83aa8a00693f44b1abf547d326f4af3a83
SHA2560c7e13a8af6cc5a50045c8786504b75e33b9257d79c9fc4dff0b84da3b3743d8
SHA512813746baff15d2f7cc384d4fc12c3a9e91a13e6c36937f63f318d5ddaf8ff031fc2069ba44cee8f56caf98921ccacb0b6dc4304048287a12c09e261e861ea66d
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB