Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-08-2024 20:42
General
-
Target
2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid.exe
-
Size
2.6MB
-
MD5
04c219134cffc77c39841c30704b2f6b
-
SHA1
1ac5a5b9a18575b0449745dd2d069f7a8b561d46
-
SHA256
6c59c6cfadff62b8d3b301d97e91b6a65b3da0415641fbabf95e3404c8e4fcbd
-
SHA512
58854e09a781150255d662a2a7968159b81a516dc05aa99a787da387b2baaba2c18e7187274e48b8cddb58aa920d7cdc4bdcab98a955f0a3bfd56fbc980b8361
-
SSDEEP
24576:0AKY7+JCMah2pE2Qd6fTmDCRiq2qRNQIB/1:0fYqUMahob/7mDCRV2iQI
Malware Config
Signatures
-
ParallaxRat
ParallaxRat is a multipurpose RAT written in MASM.
-
ParallaxRat payload 19 IoCs
Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 44 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 18 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious use of UnmapMainImage
-
C:\Users\Admin\AppData\Local\Temp\2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid.exe"3⤵
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
4KB
-
Filesize
512KB
-
Filesize
320KB
-
Filesize
2.6MB
-
Filesize
960KB
-
Filesize
760KB
-
Filesize
512KB
-
Filesize
2.8MB
-
Filesize
512KB
-
Filesize
4KB