Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09/04/2024, 12:43
General
-
Target
2024-04-09_e5b3839c1da56a5b567641ffa7fec567_icedid.exe
-
Size
739KB
-
MD5
e5b3839c1da56a5b567641ffa7fec567
-
SHA1
9c67e33e08407262e4054388a8936f29a67a862f
-
SHA256
8979bccfa5b7e59fbb9317d61828b52273b1f53f9759ded5d1d54bfcc215fe13
-
SHA512
be002f58ae1d1d1e7290f6cba3de160d6c627064253d38158527daff5eb67e4321bf800e1fbdf35303c0d1b1fb4032ab69f3bed47d90c150a802bd5e6b663d74
-
SSDEEP
12288:kOnqNqb5isUxw8ZOGdhtWxoOBIZHyqbFZrL0+OCLOr:kkqNqb5iJS8gXotyq5ZrLVOGo
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_e5b3839c1da56a5b567641ffa7fec567_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_e5b3839c1da56a5b567641ffa7fec567_icedid.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x328 0x2fc1⤵
- Suspicious use of AdjustPrivilegeToken