Overview

overview

3

Static

static

3

2024-06-09...id.exe

windows7-x64

3

2024-06-09...id.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    94s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 22:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid.exe

  • Size

    2.0MB

  • MD5

    fe1c6fb6962112aaa64cd6de8a8b37f7

  • SHA1

    3ced564063c302f42f1ac9182662aa3cd0cbadc9

  • SHA256

    6c00211f7c834e90934a8ca02b565447c0fa25de1c9b036cb37329a0a5aee6d5

  • SHA512

    1f6fd6a3ec2718dc39806b4725eb9588e49a6c7a27614de5492fa9bd5278e00a154f9eee675948c6666ec84a0c58997c202a65b7774bacaee69ef705b64eb777

  • SSDEEP

    24576:/5qwGdpycrGFYKnmQ8QlVowi4LsuX8hkFLx0N:/5OpNrGmimxUVC4TXvx0N

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ManagerLog.txt
    Filesize

    1KB

    MD5

    fd2f27327fa48cbe39ee7c04e177cf1a

    SHA1

    8c133818490f95ebedd751b5fd26a7377dc57b59

    SHA256

    7dbc4c2ca655a92542b6960550cfa6892cbba459831e6be09293f715ead14a26

    SHA512

    1b5cd88f9c836acdb4561eb59c37e5748c93e201692de8cf608ce2df445363fe8d37d47fcd3b27754195a5c2cf22e287884766ee3e35b41e7e357156b428b9e4

    Download Submit