Analysis
- max time kernel
120s - max time network
121s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
- submitted
29/05/2024, 12:11
General
- Target 2024-05-29_91542f135dae05f625d8d8bb6a7b4f20_icedid.exe
- Size 11.2MB
- Sample240529-pc33psdh3w
- SHA256 000ee06b58a49f75deef4cfddc67265e0912cba61aafd57f9b65187491c4f812
Score
9/10
Malware Config
Signatures
- Detects executables calling ClearMyTracksByProcess 1 IoCs
- Program crash 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-29_91542f135dae05f625d8d8bb6a7b4f20_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-29_91542f135dae05f625d8d8bb6a7b4f20_icedid.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 7322⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2740-0-0x000000007414E000-0x000000007414F000-memory.dmp
memory/2740-1-0x0000000000160000-0x0000000000C8E000-memory.dmp
memory/2740-2-0x0000000074140000-0x000000007482E000-memory.dmp
memory/2740-3-0x000000007414E000-0x000000007414F000-memory.dmp
memory/2740-4-0x0000000074140000-0x000000007482E000-memory.dmp