Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-08-2024 00:58
General
-
Target
2024-08-19_f3e45c308de0aaae9a32a709b8cc074b_icedid.exe
-
Size
10.1MB
-
MD5
f3e45c308de0aaae9a32a709b8cc074b
-
SHA1
4f80295e79a8546e2193cb5dda582a98807b1ca2
-
SHA256
c3d0f8c246baeb384d2f260911abd8d45783113488c835be1f27ba56a051f3a0
-
SHA512
ffc780874e818efbc6c79f84d1e93f041844556b390a36bddd412b1ed5e367a2ec0ede41434028473bee0e820425a788f831c5e8f0e85d4be1aa7d2b3768c281
-
SSDEEP
98304:1QY0FUGKG7QAhQsyHHVwKt0C4AXJgS3JiOEnNrTgiVEooKidt+JBAUZLknCR:1UAmsnSi4oJgQF8rzVEHdQJVGCR
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-19_f3e45c308de0aaae9a32a709b8cc074b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-19_f3e45c308de0aaae9a32a709b8cc074b_icedid.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx