Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07-09-2024 11:44
General
-
Target
2024-09-07_48bf02af432649a32b5fe715337ebce0_hacktools_icedid.exe
-
Size
12.8MB
-
MD5
48bf02af432649a32b5fe715337ebce0
-
SHA1
aaecb3dc70d06a64f10e676989dcdf70614114c0
-
SHA256
add0b77a9b48aad05536026d458ec82c2cfc43d0fcb6e710a79fbc8620de95d7
-
SHA512
d2dd211e8bc0116ef0c049ec987b0955999b1993ff6e265ce074c60698abe8e117652c4aaa12da975429193b7ebaf2b85f1cf95f9566901a19f5368fe31f1ae9
-
SSDEEP
196608:ir5XwZBH27qT4TNoCt/n/EVTOrS4rEKkK1aUJiyi6K/vXtzRboLc9m+1JV5au:IprHmY9K/vXdloLcg+1L
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-07_48bf02af432649a32b5fe715337ebce0_hacktools_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-07_48bf02af432649a32b5fe715337ebce0_hacktools_icedid.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
MD5717ae0841cf17611cefc59ca6cf8284e
SHA135d0dd5cacebb5787a07647f8536aa0294ca680d
SHA2569b89bada8584f038c5c6744ea5249d71a5fa6d953a0152dbad21827a969e047d
SHA5124efd5073d287ecea9cc7eed7d42e9b7e927f33d90faebb348651a35ef36d8ed4fb28e0f7dce77082d264cd0070c5a30393814a44d9760905d9279c2fbe164fde
-
Filesize
449KB
MD5e85cb3d374cb36f8320410b201f655be
SHA155da326e364680c53fe608983161faa0d6aaa0c4
SHA25685d1e6c6297a0d814c2a6c8db4dad4251e5a0660980f2257cca51188c9c15f8c
SHA5120aceb421487bae4de8fef4fff24f843cd90ec0f9467afc0a742b3e4a941322001fb9e40f9d0c8ae4c0535b1dd29a34615732f2c5b950bd03f1a88d191554481c
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
144KB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
4KB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
4KB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB
-
Filesize
13.4MB