Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
25-05-2024 08:25
General
-
Target
2024-05-25_1c899fdcbad3f8f970ff64397b63f937_icedid.exe
-
Size
586KB
-
MD5
1c899fdcbad3f8f970ff64397b63f937
-
SHA1
9c8507aca1c1d56f1387734d361f763f5d444fcf
-
SHA256
22737c308e140c9a27d512eb22387aaed27191daff4b7821683d3a57920a4411
-
SHA512
f3bb7b2e670f1436de9a82e34f5ed5033cb204ea10887601f52219a9806c41e85a799aaae06e25db021d7eaa78fe7ece623ebddec12913db6aa5184b6a2c4fe8
-
SSDEEP
12288:pplrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:rxRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-25_1c899fdcbad3f8f970ff64397b63f937_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-25_1c899fdcbad3f8f970ff64397b63f937_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\runtime\redistribution.exe"C:\Program Files\runtime\redistribution.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD538882024e4792108bde39bb086e8846b
SHA1afddaaae3844633eae01c8c6ce9f1a2897099a90
SHA256d421d9cd8bbd6ededb603f46f7c603380cd5fbd723315b3accee35c00a3a4ffa
SHA512753fc79f8ff5669ec874414fe2af10264d521874bb7585ffffb3b034da8c6b03e0227360e8e0daaf9d2b819a359d6a7cb8b1488507635ec05ce83ea77fae4d34
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB