Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
12/08/2024, 12:31
General
-
Target
2024-08-12_744149377ee276ab39f9425f778abdea_hacktools_icedid.exe
-
Size
4.2MB
-
MD5
744149377ee276ab39f9425f778abdea
-
SHA1
0a129db5792e18e2b84b610acb9a442a040acb78
-
SHA256
2b8ab002259a7e886e387499ee7f502e9b12ee44c5759941478fea690097599e
-
SHA512
3f60cc90f71c7de6b3eecc92443cbd6bdec177f59616d0eb7b9ca95dca0cd12b54dc033370673fc03787fa135fcc2867a79b2f10210bce7e15fbbb9cafbf1b5f
-
SSDEEP
98304:xzZQvSrGGTNCwsiVXNpoakxGEMoiy0fGK1mU7Qbo0ZVp927Lnz0+UgghGXDiMd0U:LZVXNpoakxGEMoiy0fGK1mU7Qbo0ZVpJ
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-12_744149377ee276ab39f9425f778abdea_hacktools_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-12_744149377ee276ab39f9425f778abdea_hacktools_icedid.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4.5MB
-
Filesize
4KB
-
Filesize
4.5MB