Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 03:04
General
-
Target
2024-04-10_2eb93d61c94370633fdbfc560f6602d1_icedid_vidar.exe
-
Size
4.3MB
-
MD5
2eb93d61c94370633fdbfc560f6602d1
-
SHA1
4e76a32a2e3cc8912565eb4b0b551a6d6c7961c8
-
SHA256
8b522ed2fdce3c18b938ee934c47102573ad835bf6f6b63bd4962b63fbea5164
-
SHA512
3bdcd720744dd8a944e08c842192e6772caa6a4c03ae3e768a41276f7203af705004a8c9747e295dfb1380cc9f04a4bb8748182b1efdb1206227c8e437da7b4e
-
SSDEEP
49152:TZISWXYnqgKGwoSPre9ivNjfTrr4JRbJkfpsuhQmfRyQK4IPomZl+UQPO:VI1PCMbT+3kfps4qQK4IPl+fPO
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-10_2eb93d61c94370633fdbfc560f6602d1_icedid_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-10_2eb93d61c94370633fdbfc560f6602d1_icedid_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx