01624423732bd35b5154e1a1639f16d69afbe9965029950ebef88866d617bfbc

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02-06-2024 06:26

Target

2024-06-02_4e461567c577fed74ff761656e422525_icedid_nymaim.exe
Size

1.0MB
MD5

4e461567c577fed74ff761656e422525
SHA1

a2053a59118e0c91746104e88bf2b20e34224ab2
SHA256

01624423732bd35b5154e1a1639f16d69afbe9965029950ebef88866d617bfbc
SHA512

3e416cdf9c7bbf549908342421692f99ad4b0fa145f067040802bfd53fa171c3c5edcf3037b9211a9af39d1ebdcd40adfc3e634ebe4b63eac43681ad3325b717
SSDEEP

12288:llr8TiIeGYL8VEJJ0XrVC76K8t3ra+ujKv45d25kJ7YwboMn10XREIDPTBBitNQx:rmiLGk8YJ0bra+uOvEuXREIDTiXa6A

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1440	2024-06-02_4e461567c577fed74ff761656e422525_icedid_nymaim.exe
1440	2024-06-02_4e461567c577fed74ff761656e422525_icedid_nymaim.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-02_4e461567c577fed74ff761656e422525_icedid_nymaim.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-02_4e461567c577fed74ff761656e422525_icedid_nymaim.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1440