17ea7bd8a0cfed9fa47c20be8299cb5a1ac287d81829afb45acedde87a2d6ff4

Analysis

max time kernel
154s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 09:27

Target

2024-03-13_0fe9e811b536da85a1fce088f5e6f3ed_icedid.exe
Size

2.0MB
MD5

0fe9e811b536da85a1fce088f5e6f3ed
SHA1

35f32f99adc03a42b7796856b4c4e0f674301168
SHA256

17ea7bd8a0cfed9fa47c20be8299cb5a1ac287d81829afb45acedde87a2d6ff4
SHA512

5d0ca8773d4844421866ff192ff116fec439ae88ee12a826ae5788b33f51a97e1246785d3cbf9a763c036e3a622158d20e703a19fbb90c3a2462f2ee994bb4da
SSDEEP

49152:ZjEMS51kdYrJkFcFm3dKHljakVL3updKMKSIAtQx9FV:ZbS51kdYrJcccdKHljakJ4dPKSIAtQxV

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2176	2024-03-13_0fe9e811b536da85a1fce088f5e6f3ed_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2024-03-13_0fe9e811b536da85a1fce088f5e6f3ed_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-13_0fe9e811b536da85a1fce088f5e6f3ed_icedid.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1040 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:8
1⤵
PID:4984