410adfc4186edf2d0457c88cb339423315d9bd6118509f4c4cdbdb5d0737997c

Analysis

max time kernel
134s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04/06/2024, 21:51

Target

2024-06-04_6a3aee8e3326f3e662c6efbb48038a57_icedid.exe
Size

295KB
MD5

6a3aee8e3326f3e662c6efbb48038a57
SHA1

507bb4c10dfdb4513aaff6dc37343452806d0746
SHA256

410adfc4186edf2d0457c88cb339423315d9bd6118509f4c4cdbdb5d0737997c
SHA512

be77cf56dd0f495d99de3891ac3b778ecc98b6b88cdea5aa0d7c373b6e00c31b3ccd133f814f892e268279093a87937ae0bf6f9c123442d2ecc1ad446190dcdd
SSDEEP

6144:2Z5xO0y9TSyfcqK4uAlA+nX2WnwfeTLCftEHP:2ZbyfcyuAlVGjWiKHP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
736	2024-06-04_6a3aee8e3326f3e662c6efbb48038a57_icedid.exe
736	2024-06-04_6a3aee8e3326f3e662c6efbb48038a57_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-04_6a3aee8e3326f3e662c6efbb48038a57_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-04_6a3aee8e3326f3e662c6efbb48038a57_icedid.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4376,i,15140928051103392835,1612840580898364401,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:8
1⤵
PID:116