Analysis
-
max time kernel
140s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2024 19:57
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_e9123b2c61d260eb09784e1794d2add1_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_e9123b2c61d260eb09784e1794d2add1_icedid.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-28_e9123b2c61d260eb09784e1794d2add1_icedid.exe
-
Size
1.7MB
-
MD5
e9123b2c61d260eb09784e1794d2add1
-
SHA1
4e02d03f486759a7dbeaa23172d786dac7dc2a75
-
SHA256
52cdc0d2ed9b125fc30ef22857161ad3b31d3922fce2a70381ed27fb5f2199da
-
SHA512
98d42aff1956921365870755ad11207b965670ebaf1078c8234fcd7475331715151d17d4ec0de50e271c20721344369e6a2917de7da74fd9246ab3e72c015353
-
SSDEEP
49152:b6ikU0bnaT4VESGIJ20KcPYN2t+5pemyyIq3xrpj8yNvY1R4P7HjC2KymhuXJIfm:iblVEetDAN2tEemyyIq3xrpj8yNvY1Ry
Malware Config
Signatures
-
Suspicious behavior: RenamesItself 1 IoCs
pid Process 3276 2024-01-28_e9123b2c61d260eb09784e1794d2add1_icedid.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3276 2024-01-28_e9123b2c61d260eb09784e1794d2add1_icedid.exe 3276 2024-01-28_e9123b2c61d260eb09784e1794d2add1_icedid.exe