33d9a1bb8c236416a04f49094de801e3b8cb75df51caf18a567c462c4429d9a9

Analysis

max time kernel
137s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2023, 15:11

Target

2023-08-27_78f5d22613f9ccab6db3e8b4bdc18e8b_icedid_JC.exe
Size

13.7MB
MD5

78f5d22613f9ccab6db3e8b4bdc18e8b
SHA1

a9c5a297c179d84f6eb373d49fa42ee6a10c78c3
SHA256

33d9a1bb8c236416a04f49094de801e3b8cb75df51caf18a567c462c4429d9a9
SHA512

0bcd76e68343171d2c6669960079a0a2052b9ebd1f4cf649c04d6c42d435486c9109c8d2def6184ef34505a2916aa05221c1d18c0bd5c7f46b5c6465ada5c2f8
SSDEEP

393216:pp3RAs7/m+NtWKIoLjJMY9H4QPWvHE74L4GECcqkM:R4+2GLdLlZc1L4GTcc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4560	976	WerFault.exe	84

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
976	2023-08-27_78f5d22613f9ccab6db3e8b4bdc18e8b_icedid_JC.exe
976	2023-08-27_78f5d22613f9ccab6db3e8b4bdc18e8b_icedid_JC.exe

C:\Users\Admin\AppData\Local\Temp\2023-08-27_78f5d22613f9ccab6db3e8b4bdc18e8b_icedid_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2023-08-27_78f5d22613f9ccab6db3e8b4bdc18e8b_icedid_JC.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 976 -s 792
  2⤵
  - Program crash
  PID:4560

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 976 -ip 976
1⤵
PID:3900