Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
23-05-2024 00:57
General
-
Target
2024-05-23_e457b9999f121c0312fda4d09ffa16c1_icedid.exe
-
Size
585KB
-
MD5
e457b9999f121c0312fda4d09ffa16c1
-
SHA1
e7d7e170546453ae7b72311de48b651b1f93b06e
-
SHA256
e8988fc3769d87d790979fe15e70ab0e4f0770a64552300181660a683c35e3fb
-
SHA512
bcb0cb37fea5de75c9faa4d7baf70988e4f2d8b4ba92f3c9edc6ab2f1f0def6544aa024442c29726221e58589a251a6064af1bfb4c39f20402f74eda561f1e60
-
SSDEEP
12288:mplrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:CxR1+FCcuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_e457b9999f121c0312fda4d09ffa16c1_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_e457b9999f121c0312fda4d09ffa16c1_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Dsetup1\Dsetup2.exe"C:\Program Files\Dsetup1\Dsetup2.exe" "33201"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
585KB
MD53a660d05959cede1cd73837bdc1ba996
SHA1ceaa9527b68e4568682ba9517dc5bda9858a9bce
SHA2560bd0a86f3e2c5bd97c8ad9d76c30a15596f44ae406caa5133da891bd53c6e03c
SHA512cdf389f398e57e2ba5696b74419a65b0fe65efc9f04678392b4c39e5c68116280027106b37479bb7efe0ec4a7d623c216dad1092d9a07fdb4079031bffc06fd5
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB