Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15/06/2024, 10:57
General
-
Target
2024-06-15_3c2646dff6f52832541afa46027bf4b3_icedid.exe
-
Size
8.8MB
-
MD5
3c2646dff6f52832541afa46027bf4b3
-
SHA1
001bef47a2339e9114d37533c338723a431c4e1b
-
SHA256
f5ae598bb93d6fb871b8252806a6f3ccef4117e6f1e0aa893c899d9e60858856
-
SHA512
1b22473aa28d495afb25bcb87830bc4481ba1fb704365b48be40448912d89727c67f58f3eb25b8039b5b3590bc4055c655b9069d0d2ee534b0fefbe88f92af1f
-
SSDEEP
98304:8KQBK9zYiMArTjVQjadX4pKDDkqWPlaOnFLCrnHaWXN4fwxYxAUGwfG:8KQK9zYiMKHVKnF+TaWXNXxvwfG
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-15_3c2646dff6f52832541afa46027bf4b3_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-15_3c2646dff6f52832541afa46027bf4b3_icedid.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4376,i,15142778360084620907,1763097090506261076,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:81⤵