a1353e339a3fde1cbc328b9f5fda7f758bc8a8e1e75e69099616244ec8b2c4a0

Analysis

max time kernel
139s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
26/08/2023, 20:11

Target

a712150ef77a875acbdd7facd6f18f7d_icedid_JC.exe
Size

364KB
MD5

a712150ef77a875acbdd7facd6f18f7d
SHA1

e0c15c10cb1ea90c875e4a18a933cc03987fdda0
SHA256

a1353e339a3fde1cbc328b9f5fda7f758bc8a8e1e75e69099616244ec8b2c4a0
SHA512

ca9f59d309bcac2c32c9690bea0c0240e5c3d769c8d0e04ff345b0c31420dc9e3db0b7a3e77d504cbae6096e334fcef70b6af544fc005c80097e620e13c8c429
SSDEEP

6144:lqIA540P2+iccHol4AyUwdy7tCUVrAsX+pq/ELFEU3Ux/Ww0cO1Lc7JE6KD+u3dE:k+0P2+iccHolAjdG3X+7Fnk1scN7G6Si

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{DBD74EE0-B6B7-45B5-A065-B483A7A53EA8}.catalogItem	svchost.exe

C:\Users\Admin\AppData\Local\Temp\a712150ef77a875acbdd7facd6f18f7d_icedid_JC.exe
"C:\Users\Admin\AppData\Local\Temp\a712150ef77a875acbdd7facd6f18f7d_icedid_JC.exe"
1⤵
PID:2744

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:3244