Analysis
-
max time kernel
136s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
22/10/2023, 10:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.2023-09-06_9139a87c49e16feff9b196d5f9f650dc_icedid_JC.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.2023-09-06_9139a87c49e16feff9b196d5f9f650dc_icedid_JC.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.2023-09-06_9139a87c49e16feff9b196d5f9f650dc_icedid_JC.exe
-
Size
5.1MB
-
MD5
9139a87c49e16feff9b196d5f9f650dc
-
SHA1
177091871e67d36cfa20d7d3abbb024d44962b33
-
SHA256
53891ddbac852224a3d3f650c1992cd0d4b4d007fb019ab65602a3866a47cd26
-
SHA512
625505099712a14586c107be0054e4564fc937c544631a6e9c3a748c14f66ec29bbd4fc168dcfd7694db846916bb1f69855aeaf5ca45127962c32f132a00a6f1
-
SSDEEP
98304:/RQB4idldqIAjqJruUs102EYwfX/Gpm0TrHnzU6wbVK9:/RQXdgqJyZ102ELnIm+Y6l
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3064 NEAS.2023-09-06_9139a87c49e16feff9b196d5f9f650dc_icedid_JC.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3064 NEAS.2023-09-06_9139a87c49e16feff9b196d5f9f650dc_icedid_JC.exe 3064 NEAS.2023-09-06_9139a87c49e16feff9b196d5f9f650dc_icedid_JC.exe