a7c3f5ae7becb92e698fc15e139958a5699d5060dc2a0a8409c9db08d0b313c6

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2024, 05:54

Target

2024-02-12_f117eeabc6b2677bcb4a4ca8c430d407_icedid.exe
Size

368KB
MD5

f117eeabc6b2677bcb4a4ca8c430d407
SHA1

334ff7881e6b573cf7e5f2ac8b1c94fa0cf55a1c
SHA256

a7c3f5ae7becb92e698fc15e139958a5699d5060dc2a0a8409c9db08d0b313c6
SHA512

c705b7f99ed9634ce84b753c2729563a93281bd95f24dd106a3ed71a2a9e8cbcabeb13824abb31b3f3ca23407a6cb71f387f827d1bb1ced31c2ad95b69ed7b3d
SSDEEP

6144:Xuz+3yOq5SYs24tP16duf0vOv+LDTvlo4fkNjhv//j4sEP:Xuq3yV5bp4tsd0Ko4fkN1vpEP

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Users\Admin\AppData\Local\Temp\2024-02-12_f117eeabc6b2677bcb4a4ca8c430d407_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-12_f117eeabc6b2677bcb4a4ca8c430d407_icedid.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2580

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact