Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28-06-2024 00:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe
Resource
win7-20240508-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe
-
Size
3.4MB
-
MD5
e4bfb6836ce3dbc5fa964acbf39bd972
-
SHA1
3215bb1b823eda2b4940bf7a4f09946191b3f2ee
-
SHA256
fcd02857e189b4ccda449cb13a32de601580eb0e10898f423b1bdd5a5e34ce82
-
SHA512
38076c32efa49798e3a7b10d81e938e8220c1e9ea2557a9bf95f1c4e6e72cd29c744ba0860b3fae2dbf5a0b764adadcd4a0e8e8ee67123f7d716da5a02593f7d
-
SSDEEP
24576:wDI2fWt3kkeXVix+8VQhcKAaBgEV0gI6zEaYtXac3MHjaAaYWsL0KZM1cdW+8HDB:w6K+Kj8naMKc3t6KKeRQ3j+f
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1616 2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe 1616 2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1616 2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe 1616 2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1616 2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1616