Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
04/02/2024, 03:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-02-04_b3fc4aa93d16237886fcdb98cdd4cb07_icedid.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-02-04_b3fc4aa93d16237886fcdb98cdd4cb07_icedid.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
2024-02-04_b3fc4aa93d16237886fcdb98cdd4cb07_icedid.exe
-
Size
496KB
-
MD5
b3fc4aa93d16237886fcdb98cdd4cb07
-
SHA1
3accb0030441b4ea0cdce4863c0c92b4303d1bb6
-
SHA256
73ba13322c1d0c9212d9dd426d56e341ba952ff7da4e0301f448132177e4f720
-
SHA512
3c91a4411c500f554d85a29dbc33ee098a13873910ed769df624f76cf8b4cf6321fc9d2a2d105f2411e354943904768028fa3d38f7adf3a015fd57da62c51d2f
-
SSDEEP
12288:iHMCbvYzklGq5/r7cl9LtUNY5ASAES83Eoo:oMSylBtUe6Eb3Eoo
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1392 2024-02-04_b3fc4aa93d16237886fcdb98cdd4cb07_icedid.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1392 2024-02-04_b3fc4aa93d16237886fcdb98cdd4cb07_icedid.exe 1392 2024-02-04_b3fc4aa93d16237886fcdb98cdd4cb07_icedid.exe