a3fa68045d0106d6db3d43df6b5997d9034f9f7d2a34148187498e4b504ebf58

Analysis

max time kernel
120s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/03/2024, 22:18

Target
svchost_icedid_unpacked.bin.dll
Size 15KB
Sample240312-17xpysec38
SHA256 a3fa68045d0106d6db3d43df6b5997d9034f9f7d2a34148187498e4b504ebf58
MD5 06cc2fdfd408c15a1e16adfb46e8bb38
SHA1 585cfc19bdb8dfb92407e917615be1ab9dd523e5
SHA512 eb11a4b40eb20610f3296af8c8a7c8af5934e10922146fdc524b8212077025ccd22aa69e16aa38af56a86bd49aedc9a36a00a3cb7de3368b194fe9026ebb18d4
SSDEEP 192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLRP0tkYGijY5:s5Jxayczq7Yjt9lfle9s6PL16kYGi85
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4576	rundll32.exe
4576	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\svchost_icedid_unpacked.bin.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4576