8af73188ca6e978c9cbb8b32afeb8e88a4fec3653dd499ef80b209b7511ae0dd

Analysis

max time kernel
141s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29-05-2024 02:49

Target

2024-05-29_d8a05e14bff17e7da8bbfdca8f284476_icedid_nymaim.exe
Size

5.8MB
MD5

d8a05e14bff17e7da8bbfdca8f284476
SHA1

6581146768b721b80fe017589c4c1b3efd4185db
SHA256

8af73188ca6e978c9cbb8b32afeb8e88a4fec3653dd499ef80b209b7511ae0dd
SHA512

1ff2191be4f76de348065c374720344f942eca9e42a58b3af08a1d0dfebee3e50b4369e68f7c7d041658b1a3fb0776a98b84bfb3e64dd88c9ccc7daa792d1b31
SSDEEP

98304:y2VhRNaNihNxivDDJPHthVlfRZt+I9OR4r3:7VheiuvDDlfRZ8I9OR4z

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3080	2024-05-29_d8a05e14bff17e7da8bbfdca8f284476_icedid_nymaim.exe
3080	2024-05-29_d8a05e14bff17e7da8bbfdca8f284476_icedid_nymaim.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-29_d8a05e14bff17e7da8bbfdca8f284476_icedid_nymaim.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-29_d8a05e14bff17e7da8bbfdca8f284476_icedid_nymaim.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3992 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:8
1⤵
PID:2708