Analysis
-
max time kernel
130s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
20/08/2024, 09:35
General
-
Target
2024-08-20_e48fc5ad59b499d1139ac1b81d236226_eternalromance_icedid.exe
-
Size
19.0MB
-
MD5
e48fc5ad59b499d1139ac1b81d236226
-
SHA1
d6a535aaa78dbf1883f09ccd146c500913f42d25
-
SHA256
7888da83e656ef9282edd4e2c5ea4e48526915c711dd3814d544b6af021d910d
-
SHA512
0ba737b00d3adae3d2a10b9438a505f757834e123c348dc5efa6aade992b8f4bef5f6587d83880e2493158257c07f2bda6751229827a2a367693e5c85f7a57ea
-
SSDEEP
393216:+I6hTG5G866Gf2CsTnRZMZmOpT4c0nHXAbAK5OP:eTUG86HsReZmOpT4c4X02
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-20_e48fc5ad59b499d1139ac1b81d236226_eternalromance_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-20_e48fc5ad59b499d1139ac1b81d236226_eternalromance_icedid.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx