Analysis
-
max time kernel
149s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2024, 09:03
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe
-
Size
1.4MB
-
MD5
10330c24ca4bf496a588f378d39df984
-
SHA1
0827657d9b92ce23ff8af73493213d808092c3cf
-
SHA256
5b403d77d0b7c4e1354325a34e8d5c48635ee82f98889a13c254517cd2f4649a
-
SHA512
8edc22031fff0c602e43af16a8f280c98147bcd64d837fb45c9708dff2ec8e7e551372c8d09c36adfa43329245401ed5aff9bd8221390bccbd77c7d8a67c7da8
-
SSDEEP
24576:ztm8zBLdfcuzvsH2y2X3o6sXkVaWXcxmQJ21QZ:xnfRzVzmXkVaW4mQk
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1784 2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData 2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe Set value (data) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData\UserFilter = 411f00005308adba01000000320000000100000001000000dc0000005ae832d8a337d001010000000a0061006c0069007000610079002e0063006f006d00 2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1784 2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe 1784 2024-06-08_10330c24ca4bf496a588f378d39df984_icedid.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
MD5afd14de763f7c540e686afdc55281039
SHA10318a2650104e5eb7b6ca7c02d1e54f276a4f14c
SHA25609a3bf6a8df99c692ba656779c94932a08b61c21350a4bba4bf19afb40076c6c
SHA5124ad521f270ea54359c91084f76c9287bea9e93533681d766aa7f7dce60f1f731244c27020af141f8a8329ad6c9ec6b080a1cc7665a14b8cdc3bdbb632905a321