Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23-05-2024 00:48
General
-
Target
2024-05-23_c018bd38e5a091bc648482674a7a2e9d_icedid.exe
-
Size
586KB
-
MD5
c018bd38e5a091bc648482674a7a2e9d
-
SHA1
49ef7824a8b66ee35639f636580be5645b636057
-
SHA256
b9b707b405111146ddb949dbb58f059cb8fe3909fa59e45d34833dc2a2d7c7e6
-
SHA512
ce4d47f062c172bee4631d7ce5181e4bfb6a494881486b6aa673152b343c910168d02e8ac5847f6fbac17b6fc7e1f17e7112bbdc18af91847248db8f024a555e
-
SSDEEP
12288:IplrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:0xR1+FCcuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_c018bd38e5a091bc648482674a7a2e9d_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_c018bd38e5a091bc648482674a7a2e9d_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Framework\skipto.exe"C:\Program Files\Framework\skipto.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
586KB
MD581cf37af1f21810c907f3b9f9f0cdea6
SHA1886baac395172a4d1ae8cc2ebebe882856984635
SHA256ca7ee061550a423e6258a3bf17c2a051eae26608833eff4803b090862f2a9fdb
SHA512426fd45b4ab93d01e5524318f5195c5ee818ec346c9bf848668dfb8cb4c1546f21f09a0c370ee2e6dbdb2336db451bef2c0552176b46918f378dcd7ea1ad522b
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB