| description | ioc | process |
|---|
| File created | C:\Program Files\Internet Explorer\ielowutil.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\idlj.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\kinit.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-1000-0000000FF1CE}\misc.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\orbd.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\msoasb.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\VideoLAN\VLC\vlc.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome_proxy.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\msotd.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\extcheck.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\javapackager.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\visicon.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Mozilla Firefox\default-browser-agent.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Mozilla Firefox\maintenanceservice.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\jdb.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\jabswitch.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\jjs.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.ShowHelp.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Mozilla Firefox\minidump-analyzer.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File created | C:\Program Files\Windows Media Player\wmpnetwk.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\java.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\unpack200.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\dotnet\dotnet.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\servertool.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File created | C:\Program Files\Internet Explorer\iediagcmd.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\javaw.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\javac.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\unpack200.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pubs.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File created | C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\javaw.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\kinit.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jre-1.8\bin\policytool.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\java.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\lyncicon.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\VideoLAN\VLC\uninstall.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File created | C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\bin\jmap.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Mozilla Firefox\firefox.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
| File opened for modification | C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe | 2024-05-23_efe125fd9b66c6bf045d394f53e9d2c9_icedid.exe |
