Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13/10/2024, 01:54
General
-
Target
2024-10-13_2e27a6f83e05062f30ba121b6336ed8e_icedid.exe
-
Size
908KB
-
MD5
2e27a6f83e05062f30ba121b6336ed8e
-
SHA1
8301a33a1c9a41ecf8f08073540353f7f8bb5feb
-
SHA256
bdcc905283c471bc144a8fe84f8514e299d5576f427464cb89cd419860b792df
-
SHA512
516082a41f45f9f855343ec8d65247d96b75c71b05b13ac5e6c26f6956fe917c3a82996456a1481e85013860f09a6d974a1aa43091129b5559993042fa35e056
-
SSDEEP
12288:qR6gYdcOUGtYa0cDyXkoCxaNHlofMmhR5nWFpPoSY2nXqOY:qR6ldqGtv0Uy0oOaJlofZ0bRa
Malware Config
Signatures
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-13_2e27a6f83e05062f30ba121b6336ed8e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-13_2e27a6f83e05062f30ba121b6336ed8e_icedid.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
972KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
972KB