Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 18:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe
Resource
win10v2004-20240226-en
4 signatures
150 seconds
General
-
Target
2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe
-
Size
1.5MB
-
MD5
559e7dbcbce48996b71060be11268b20
-
SHA1
4a9f3e59f30a92f11690814b1f9a50ec1bd3dea6
-
SHA256
725576d6fa20d503b93f9775de516eeea730ee59c969cc77740272c496640546
-
SHA512
136542006f5f27f29cec819a27aeb81a0ab0fcd7f7366c5bef2e627fd2b30afa67a4a3b2d313cacde638dead767ca0370a73a5231b26d09c52b599e4382d0835
-
SSDEEP
24576:yFGD1jIqL1jdS5v1xh0dJ0hxiXbtCzwU4hLs31hLR:y0DFzjIxhSKShLUhLR
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1888 2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe -
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 480 Process not Found -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1888 2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1888 2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe 1888 2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_559e7dbcbce48996b71060be11268b20_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:1888