Analysis
-
max time kernel
153s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
10/10/2023, 20:56
General
-
Target
2023-08-26_e009dccf6cc751f78b9bf4cdc2efb649_icedid_JC.exe
-
Size
4.7MB
-
MD5
e009dccf6cc751f78b9bf4cdc2efb649
-
SHA1
82d760820d96d1834f386909ab7a48d88ab49a9e
-
SHA256
94c49ee5084ec2d2d58ff67f63e82232098500d1f5ce281c35aa85cbe5ea6b28
-
SHA512
1b32f43f8f67457e677a6794a00f4ec03eb1cded3768bd58bd27308385dc8e6d8ac1ae7688f9ca5a65d98dbea4f2bb76ab2f16625a0178f46133c0902185c2f6
-
SSDEEP
98304:NWXZrv+LSQTcvtwmJes4fJobqVvwSaJBAUZL:MBe2qVISaJV
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_e009dccf6cc751f78b9bf4cdc2efb649_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_e009dccf6cc751f78b9bf4cdc2efb649_icedid_JC.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB