Analysis
-
max time kernel
143s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2023 11:31
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe
-
Size
10.8MB
-
MD5
fa2be216639fe3b610c57e0ed9d34f65
-
SHA1
4d008645b85fe9929f7d40704254b0012280cff3
-
SHA256
18bc904fad86f44d1fe1305ecaf970d0ca919e6c60c4284526ecd02dca9d3dc8
-
SHA512
ae5c999815966fceceeddd571ff34565d2e6e978445312f6984ca2aac2863ec0f8225213ca86af2cc6386ac568ea5ef7ad5e717efa6e11d4dad3239e15455985
-
SSDEEP
98304:tYLIrTQFc5Wotl6DE34LzYLcdQQsyHHVwKt0C4AIm9uALfprsQ6EooKidtnyJBA6:trrxsEI3CcdQsnSi4CuAdGEHdQJVhxB
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe 4608 2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_fa2be216639fe3b610c57e0ed9d34f65_icedid_JC.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4608