Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_4e831276ad29383554cf9522ab12ce37_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-30_4e831276ad29383554cf9522ab12ce37_icedid.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-30_4e831276ad29383554cf9522ab12ce37_icedid
-
Size
14.0MB
-
MD5
4e831276ad29383554cf9522ab12ce37
-
SHA1
6e400e0dde2498fe863f06ed60d3f4af2171ad51
-
SHA256
e0a7ea1596579d1791ff29f9f992798fc466d0738accf34408bea6dc6b0d8970
-
SHA512
13c2f803da3b2a8736d4cf4f17c308377384addac9126fc4509c5d68b5a5338f7630f7c7353d9f66cc20bcd700661d2f9ebdfe3edfe125e3b46cc1ce39dfe58b
-
SSDEEP
393216:2oZXayFz96ZWEtrUJrUDtyoRVJGn7so5JrppkShqgMQMZZ:TZNz96ZWEtrUJrUDtyoRvG7sorrbkShG
Malware Config
Signatures
Files
-
2024-05-30_4e831276ad29383554cf9522ab12ce37_icedid.exe windows:5 windows x86 arch:x86
3d5d0eed663bbb6dd8e6ff1ae1afc278
Code Sign
79:56:41:d3:1e:35:67:7f:b9:71:e6:9b:81:c5:98:2aCertificate
IssuerCN=LimitedPCPCorp,1.2.840.113549.1.9.1=#0c1f746563682e737570706f7274406c696d69746564706370636f72702e636f6dNot Before21/12/2019, 00:00Not After21/12/2020, 23:59SubjectCN=LimitedPCPCorp,1.2.840.113549.1.9.1=#0c1f746563682e737570706f7274406c696d69746564706370636f72702e636f6d03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStdHandle
GetEnvironmentStringsW
SetFilePointerEx
FatalAppExitA
SetConsoleCtrlHandler
GetConsoleCP
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
GetFileType
SetStdHandle
lstrlenA
VirtualFree
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
QueryPerformanceCounter
GetStartupInfoW
ReadConsoleW
GetProcessHeap
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
HeapSize
LockResource
AreFileApisANSI
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
ExitThread
CreateThread
HeapReAlloc
HeapAlloc
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
LocalUnlock
LocalLock
FindResourceExW
GetUserDefaultLCID
ReplaceFileW
GetDiskFreeSpaceW
VirtualProtect
GetProfileIntW
Sleep
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetTickCount
lstrcpyW
GetWindowsDirectoryW
SetErrorMode
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
FileTimeToSystemTime
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
GetVersionExW
GetCurrentThread
InterlockedExchange
GetAtomNameW
GlobalGetAtomNameW
CreateSemaphoreW
WaitForMultipleObjects
CreateMutexW
ReleaseMutex
ReleaseSemaphore
lstrcmpA
GetStringTypeExW
MoveFileW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
GetThreadLocale
InterlockedIncrement
ResumeThread
SuspendThread
SetThreadPriority
WaitForSingleObject
SetEvent
CloseHandle
InterlockedDecrement
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
DecodePointer
EncodePointer
CopyFileW
FormatMessageW
LocalFree
GlobalSize
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
GetModuleFileNameW
FreeResource
GetVersion
SetLastError
OutputDebugStringA
GetFileAttributesW
LocalAlloc
GetCurrentDirectoryW
SystemTimeToFileTime
SetFileTime
SearchPathW
SetFilePointer
CreateEventW
CreateJobObjectW
GetLogicalDrives
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
MulDiv
CreateDirectoryW
lstrlenW
GetExitCodeProcess
WideCharToMultiByte
LoadLibraryW
FreeLibrary
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
GetLastError
GetExitCodeThread
FindResourceW
SizeofResource
LoadResource
GetCurrentProcess
FlushInstructionCache
GetConsoleMode
user32
LockWindowUpdate
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
SetParent
IsCharLowerW
GetKeyboardLayout
PostThreadMessageW
GetSystemMenu
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
RegisterClipboardFormatW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
LoadImageW
SetRectEmpty
GetMenuDefaultItem
MessageBeep
GetNextDlgGroupItem
WaitMessage
IsIconic
DeleteMenu
InvalidateRgn
CopyAcceleratorTableW
UnregisterClassW
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
GetSysColorBrush
RealChildWindowFromPoint
GetDialogBaseUnits
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
MsgWaitForMultipleObjectsEx
GetSystemMetrics
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
IntersectRect
CharNextW
TranslateMessage
GetMessageW
LoadMenuW
GetWindowThreadProcessId
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetClassLongW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
EqualRect
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
SetScrollPos
ScrollWindow
ValidateRect
TrackPopupMenuEx
SetMenu
GetMenu
SetFocus
GetDlgCtrlID
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
PostMessageW
GetMessageTime
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendDlgItemMessageA
FillRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
ShowWindow
EnableWindow
InvalidateRect
GetClientRect
GetWindowRect
SetActiveWindow
IsWindowEnabled
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
GetUpdateRect
EndPaint
BeginPaint
CallWindowProcW
DefWindowProcW
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
GetTabbedTextExtentW
WindowFromDC
DrawIcon
GetWindowRgn
CreateMenu
InSendMessage
SendNotifyMessageW
SubtractRect
GetDoubleClickTime
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetDCEx
EnumChildWindows
CharUpperBuffW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
SetDlgItemInt
SetWindowLongW
LoadCursorW
MoveWindow
IsWindowVisible
GetParent
SendMessageW
SetTimer
KillTimer
LoadIconW
GetActiveWindow
GetCapture
SetCapture
ReleaseCapture
DrawStateW
GetDC
RedrawWindow
SetCursor
ClientToScreen
WindowFromPoint
GetSysColor
DrawFocusRect
FrameRect
CopyRect
InflateRect
OffsetRect
GetWindowLongW
LoadBitmapW
DestroyCursor
DestroyIcon
GetIconInfo
GetMessagePos
IsWindow
ReleaseDC
GetScrollPos
GetCursorPos
ScreenToClient
MapWindowPoints
SetRect
IsRectEmpty
PtInRect
DrawIconEx
WaitForInputIdle
BeginDeferWindowPos
EndDeferWindowPos
UpdateWindow
GetWindow
GetDesktopWindow
GetClassNameW
SetProcessWindowStation
MessageBoxA
SetLayeredWindowAttributes
SetWindowPos
DeferWindowPos
GetKeyState
CreatePopupMenu
AppendMenuW
MapVirtualKeyExW
gdi32
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutW
ExtTextOutW
PolyBezierTo
PolylineTo
SetViewportExtEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextColor
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
SetPixel
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
PolyDraw
Polygon
Polyline
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
CreateFontW
GetCharWidthW
StretchDIBits
GetCurrentObject
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
GetLayout
SetLayout
SetMapMode
ArcTo
StartDocW
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextColor
SetTextCharacterExtra
SetStretchBltMode
SetROP2
CreatePolygonRgn
BitBlt
SetGraphicsMode
SetMapperFlags
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateDIBPatternBrushPt
CreateBitmap
CreateDCW
CopyMetaFileW
DeleteDC
GetDeviceCaps
RemoveFontResourceW
GetBkColor
AddFontResourceW
SetViewportOrgEx
Rectangle
GetViewportOrgEx
GetTextExtentPoint32W
CreatePen
GetObjectW
StretchBlt
SelectObject
GetStockObject
DeleteObject
CreateFontIndirectW
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SetPolyFillMode
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterW
GetJobW
DocumentPropertiesW
ClosePrinter
advapi32
GetFileSecurityW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW
RegCloseKey
SetFileSecurityW
shell32
SHGetMalloc
SHAddToRecentDocs
ExtractIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
DragQueryFileW
ShellExecuteExW
SHAppBarMessage
SHBrowseForFolderW
DragFinish
SHGetFileInfoW
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
StrFormatKBSizeW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
uxtheme
GetWindowTheme
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
GetThemePartSize
IsAppThemed
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
ole32
CreateStreamOnHGlobal
CoInitializeEx
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
CoGetClassObject
OleRun
CoDisconnectObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoUninitialize
SetConvertStg
OleSaveToStream
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
CoRegisterClassObject
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitialize
CoCreateGuid
StringFromCLSID
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
CoGetMalloc
OleIsRunning
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
PropVariantCopy
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteFmtUserTypeStg
OleSetContainedObject
WriteClassStm
CreateItemMoniker
CreateGenericComposite
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegGetUserType
CreateFileMoniker
oleaut32
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayCreateVector
SysStringByteLen
SysAllocStringByteLen
VariantInit
VariantClear
VariantChangeType
OleCreateFontIndirect
SysAllocString
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SysStringLen
SafeArrayCreate
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayLock
SafeArrayUnlock
SafeArrayGetElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarDecFromStr
CreateErrorInfo
SysFreeString
SysAllocStringLen
VarCyMulI8
SystemTimeToVariantTime
GetErrorInfo
SetErrorInfo
VarBstrFromDec
oledlg
OleUIBusyW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageRectI
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 655KB - Virtual size: 654KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.4MB - Virtual size: 10.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ