Analysis

  • max time kernel
    96s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-07-2024 23:42

General

  • Target

    2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid.exe

  • Size

    5.1MB

  • MD5

    73572ad0215ada830f6ebbf357e44e38

  • SHA1

    cba1ead4b48419116993805ecbb06ba485cf7538

  • SHA256

    8d4fc03e37392faa7ce37cd159f6419432d08c61dc0740c57ed4e5d10c6fb6ff

  • SHA512

    a6227ee7b18a31f64c6a9145bd96080a111d58f2d7f82fc627d6592dab5898c88c3c284d8f2170e130e6de485558479af1d8d1873e285d581372486e8b217bbd

  • SSDEEP

    49152:Q+2LRDyxd9PwuzhNGrd/JULVX3MaPTJUu59qqTxx:Qnuxd9oudMy9bTxx

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4704-5-0x0000000076950000-0x00000000769CA000-memory.dmp

    Filesize

    488KB

  • memory/4704-15-0x0000000075A70000-0x0000000075A95000-memory.dmp

    Filesize

    148KB

  • memory/4704-24-0x0000000075930000-0x0000000075A13000-memory.dmp

    Filesize

    908KB

  • memory/4704-38-0x0000000074760000-0x00000000747D4000-memory.dmp

    Filesize

    464KB

  • memory/4704-54-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-63-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-62-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-61-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-60-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-59-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-58-0x0000000074760000-0x00000000747D4000-memory.dmp

    Filesize

    464KB

  • memory/4704-57-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-56-0x0000000075930000-0x0000000075A13000-memory.dmp

    Filesize

    908KB

  • memory/4704-55-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-53-0x0000000076BB0000-0x0000000076C5F000-memory.dmp

    Filesize

    700KB

  • memory/4704-52-0x00000000769D0000-0x0000000076AAC000-memory.dmp

    Filesize

    880KB

  • memory/4704-51-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-50-0x0000000074760000-0x00000000747D4000-memory.dmp

    Filesize

    464KB

  • memory/4704-49-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-48-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-47-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-46-0x0000000076BB0000-0x0000000076C5F000-memory.dmp

    Filesize

    700KB

  • memory/4704-45-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-44-0x0000000074760000-0x00000000747D4000-memory.dmp

    Filesize

    464KB

  • memory/4704-43-0x0000000075A70000-0x0000000075A95000-memory.dmp

    Filesize

    148KB

  • memory/4704-42-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-41-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-40-0x0000000076BB0000-0x0000000076C5F000-memory.dmp

    Filesize

    700KB

  • memory/4704-39-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-37-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-36-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-35-0x0000000076BB0000-0x0000000076C5F000-memory.dmp

    Filesize

    700KB

  • memory/4704-34-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-33-0x0000000074760000-0x00000000747D4000-memory.dmp

    Filesize

    464KB

  • memory/4704-32-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-31-0x0000000075930000-0x0000000075A13000-memory.dmp

    Filesize

    908KB

  • memory/4704-30-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-29-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-28-0x0000000076BB0000-0x0000000076C5F000-memory.dmp

    Filesize

    700KB

  • memory/4704-27-0x00000000769D0000-0x0000000076AAC000-memory.dmp

    Filesize

    880KB

  • memory/4704-26-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-25-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-23-0x0000000074A80000-0x0000000074C90000-memory.dmp

    Filesize

    2.1MB

  • memory/4704-22-0x0000000076210000-0x00000000767C3000-memory.dmp

    Filesize

    5.7MB

  • memory/4704-20-0x00000000747E0000-0x0000000074806000-memory.dmp

    Filesize

    152KB

  • memory/4704-19-0x0000000074810000-0x0000000074998000-memory.dmp

    Filesize

    1.5MB

  • memory/4704-18-0x0000000075580000-0x0000000075599000-memory.dmp

    Filesize

    100KB

  • memory/4704-17-0x0000000075310000-0x0000000075430000-memory.dmp

    Filesize

    1.1MB

  • memory/4704-16-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-14-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-13-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-12-0x0000000075A70000-0x0000000075A95000-memory.dmp

    Filesize

    148KB

  • memory/4704-10-0x0000000076950000-0x00000000769CA000-memory.dmp

    Filesize

    488KB

  • memory/4704-9-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-8-0x0000000075A70000-0x0000000075A95000-memory.dmp

    Filesize

    148KB

  • memory/4704-7-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-6-0x0000000076950000-0x00000000769CA000-memory.dmp

    Filesize

    488KB

  • memory/4704-4-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-21-0x0000000076BB0000-0x0000000076C5F000-memory.dmp

    Filesize

    700KB

  • memory/4704-3-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-11-0x00000000749D0000-0x00000000749FC000-memory.dmp

    Filesize

    176KB

  • memory/4704-1-0x0000000000400000-0x0000000000925000-memory.dmp

    Filesize

    5.1MB

  • memory/4704-2-0x0000000076950000-0x00000000769CA000-memory.dmp

    Filesize

    488KB

  • memory/4704-0-0x0000000076950000-0x00000000769CA000-memory.dmp

    Filesize

    488KB