Analysis
-
max time kernel
149s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
22/04/2024, 02:47
General
-
Target
2024-04-22_898195b5a3ca48c29fdfc1faabab7171_icedid.exe
-
Size
716KB
-
MD5
898195b5a3ca48c29fdfc1faabab7171
-
SHA1
a56dedd379620f2d782353908669682d6f0cfbcb
-
SHA256
4b0ba1836b3fe75878c8851a0f450df4f7fb9fc0c45ba694c1928f609c2687c9
-
SHA512
24dba05f2d5aa93564cc6fcf9fe3fe1a5822a826684bfd955e3592bdcdeb3beca36846c0e41efc5534b0a8fa960a9550088f02b853dfdf38f41391b00ee436b0
-
SSDEEP
12288:8iLthZnTfZ7NWC3CrL5TJfh8zuiyzyJOnRVLZfCyGnixorF8vEhwgSCtRy:8iLvZn5f3CrBtWJQRLfC0xeF8vEhwgXy
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_898195b5a3ca48c29fdfc1faabab7171_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_898195b5a3ca48c29fdfc1faabab7171_icedid.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB