Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
28/06/2024, 00:37
General
-
Target
2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe
-
Size
3.4MB
-
MD5
e4bfb6836ce3dbc5fa964acbf39bd972
-
SHA1
3215bb1b823eda2b4940bf7a4f09946191b3f2ee
-
SHA256
fcd02857e189b4ccda449cb13a32de601580eb0e10898f423b1bdd5a5e34ce82
-
SHA512
38076c32efa49798e3a7b10d81e938e8220c1e9ea2557a9bf95f1c4e6e72cd29c744ba0860b3fae2dbf5a0b764adadcd4a0e8e8ee67123f7d716da5a02593f7d
-
SSDEEP
24576:wDI2fWt3kkeXVix+8VQhcKAaBgEV0gI6zEaYtXac3MHjaAaYWsL0KZM1cdW+8HDB:w6K+Kj8naMKc3t6KKeRQ3j+f
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-28_e4bfb6836ce3dbc5fa964acbf39bd972_icedid.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4344,i,11049150160560877369,2866371920339304689,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:81⤵