Analysis

  • max time kernel
    67s
  • max time network
    49s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-04-2024 11:32

General

  • Target

    2024-04-26_91beb5451784d8635036cf5bddef8840_icedid.exe

  • Size

    14.3MB

  • MD5

    91beb5451784d8635036cf5bddef8840

  • SHA1

    05cb49ef67a1c05a7a29c901079c65330e781a46

  • SHA256

    3b482641b18eb3be952228390bc8b9d324fed432736315ba1ed29b5f224f1a38

  • SHA512

    ce94fcb0185cbe3f77a33c103fcc53cb4d2147b57e1a096bcd953cf2abd3b403ee604a1a48396441cb0134ea2db0db4c9b2866336647276f6cb482d0e255abe5

  • SSDEEP

    393216:hbADJJi9z2xniZDy6/i3ChbDgMENM+sj7j84v:hr9Sv1yyM+sL1v

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-26_91beb5451784d8635036cf5bddef8840_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-26_91beb5451784d8635036cf5bddef8840_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\Zcom3214472\config.xml

    Filesize

    272B

    MD5

    dd20f0d47dfaf765253ecf0a712feef6

    SHA1

    e627fd8bdd76f2c861f57442ce6547e95840d273

    SHA256

    b36de345e119651aa791e99e6e5e292091a96424529aa0dc8ae0583c284d0d31

    SHA512

    f4836dae515b837e44fe75334b3d16dfb927496da9717bfd85747bb5afff5fa00d99347372a9591fbd0d8bfe931021858f746b59b976f17a02dabd117c13c2e4

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\Zcom3214472\filelist.xml

    Filesize

    6KB

    MD5

    f71b2878f4e3934735def49c23d649d2

    SHA1

    fce9a8d8b1a805ab55bdf43da8abc01988fce3fa

    SHA256

    12cb3c8028731f99bf15db57851c0f06948b771e00d2bdca953b7c0f277cc96e

    SHA512

    fd22a928ed16ed77b22322eecac3b85bfb30509ecaaf7f601d9ec2cd825e32448ad9706c1dc03bf755a8862fdf9c20eaf2de6a8783df7b0d4cca28922736642d