Analysis
-
max time kernel
122s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 13:49
General
-
Target
2024-02-28_9502534f46933d8bc8091843fefcfdac_icedid.exe
-
Size
647KB
-
MD5
9502534f46933d8bc8091843fefcfdac
-
SHA1
93c295188d2e7631b99ff67e214d5c4e876728f9
-
SHA256
d82288d680f26b9119ca148c7af679f2ec4dd473ccde1a6546d77d2e407056d2
-
SHA512
0f9be58fd7e8f97b397383657eb313eafac3277a500becb76c4c090a0184b8440b9720e301333e5ba30ebc9d3d7c782716dcb1e61a389f35ece4510ab40d23fa
-
SSDEEP
12288:DoioVKkHKAxBKiXP5ghx9XuIF4MRGn/usTs8Ijfdn:sXVgAxBbuznF8usTNIjVn
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-28_9502534f46933d8bc8091843fefcfdac_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-28_9502534f46933d8bc8091843fefcfdac_icedid.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx