ad5f867c1d43558095089f0753223942eff2414433a661949ce83b8babf556df

Analysis

max time kernel
149s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
24-08-2023 14:57

Target

8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Size

7.3MB
MD5

8066c9c80f6f5ae6a0abe663086d0990
SHA1

e07aab5640d6b5d29f7356977d15be1e39230e96
SHA256

ad5f867c1d43558095089f0753223942eff2414433a661949ce83b8babf556df
SHA512

0a2589c8b90689b53c6cef588e0614983c497d3b27b42726ac37d70021a5e3e4f43435fc829e01b67a279ade2a4dd7ef60e65a8b0076b7e6fffb9b6cade91dd1
SSDEEP

196608:Oai48pLuFV9yITC+GQtDmpMEogwhaT4nKeoWd29Lxu60qBsSwwImUdTGButda:vi48pLuFV9yPpE0ZBWd29Lxu60BdTGBj

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp\Last\ = "0"	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp\Current	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp\Current\ = "0"	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp\First	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp\First\ = "1"	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IntelliHelp\Last	8066c9c80f6f5ae6a0abe663086d0990_icedid_JC.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 3 IoCs