d492a7ff7a9f1f698e0abc23d76518db4ff76f8d400220cfc1f1b1dc08b07350

Analysis

max time kernel
91s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19-02-2024 15:54

Target

2024-02-19_b6d7e0936a9b721dead00217f7c1edc9_icedid.exe
Size

6.1MB
MD5

b6d7e0936a9b721dead00217f7c1edc9
SHA1

de2a5946264a3e06ee2a2e80ab338dc7e9d36486
SHA256

d492a7ff7a9f1f698e0abc23d76518db4ff76f8d400220cfc1f1b1dc08b07350
SHA512

4c313cb21be6950022c60d2ebed4bf96c1a92d13412e2271e1fe99e443628e6033841bd4affe395e09ef2633c37c4715da6f5000c6de7165c173f1e076ad54b8
SSDEEP

98304:GfK3k0cDe/fC5ljG5sxLpJ2VvdUAo5gtcAd9TEmoI7qe6pEWIGLs:t3k0HC5s5slvRAmA7Tshe9G4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2044	1680	WerFault.exe	83

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1680	2024-02-19_b6d7e0936a9b721dead00217f7c1edc9_icedid.exe
1680	2024-02-19_b6d7e0936a9b721dead00217f7c1edc9_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2024-02-19_b6d7e0936a9b721dead00217f7c1edc9_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-19_b6d7e0936a9b721dead00217f7c1edc9_icedid.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1680
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1680 -s 628
  2⤵
  - Program crash
  PID:2044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1680 -ip 1680
1⤵
PID:1072