Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-04-2024 01:20
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe
-
Size
1.8MB
-
MD5
4e99fce04b308790721391f5d9806bac
-
SHA1
42c9c89efd54f80b957b4fd2540913c8c06fe45d
-
SHA256
d9ba81364389b0b79e1d6f86aa6992964329684137197b079f109b209e6ab5e9
-
SHA512
35e280a5d46946f64ae6cb8261cb3a37a4e186b037d2d294d44bf113f7543c185fc6048f6c6dba436b2e4a8e30069ac3577fea257098bc247b82cf3a77603b9c
-
SSDEEP
49152:R6ikU0bnaT6VESGIJ20KcPYN2t+5pC6qcyyIq3xrpj8yNvY1R4P7HjC2KymhuXJV:IbLVEetDAN2tECTcyyIq3xrpj8yNvY1U
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2240 2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2240 2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe 2240 2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_4e99fce04b308790721391f5d9806bac_icedid.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:2240