Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
23-05-2024 00:29
General
-
Target
2024-05-23_3613a9e500aabe298013427c4f0d5bce_icedid.exe
-
Size
585KB
-
MD5
3613a9e500aabe298013427c4f0d5bce
-
SHA1
1d0ea75b860abcb44bb7f33a7551d922eff84cca
-
SHA256
c9d4b43ef20a05d1799e87092f4df81e3f5b5c55fe889a9ec4bd27c4ef2b009e
-
SHA512
f15d22d704eda3cbb42f82ef502c9af4dbcee748d5826f0609d0fb38bc812dc8787737412c65ea40dd764df51aecdd66b329d414ef3aca7e4bc380c0a9ba09ba
-
SSDEEP
12288:xplrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:DxR1+FCcuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_3613a9e500aabe298013427c4f0d5bce_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_3613a9e500aabe298013427c4f0d5bce_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\German\Italian.exe"C:\Program Files\German\Italian.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
585KB
MD5ca0ecafb1467f1ae9c8cf025b4a7ba6a
SHA13bd62bed6c0c3321588ac84b3a058eef0afc184c
SHA256c2df574c336dfbd2ae18023aa3797f5d54fc70e89c3561be1c941b1a55245467
SHA51294f6458899a5fa6e2e25279b1ac21ba023825cad5426ff96f49dbe026fd514a504aafbf600f3db9084ce5099b29b5bf92a8328991682eeacefe24f8f788d109d
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB