Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
02/09/2024, 15:17
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe
-
Size
14.8MB
-
MD5
60396c4155abb8e19cd2282ee477c75b
-
SHA1
b2c21a9748fed725ec836294d2f4c967a76beb84
-
SHA256
09ec59073e425635d313db1b939b5890b1478ba9bc8d121dd15d3930b7417038
-
SHA512
ada429647ee1a1b857ac3d58a287123c7fc7f291f150f70ad796b136a5b25275680092bdbd6289b0e3a0a7d5dfabaecd773b4ed697e79275b1a52c829c73019f
-
SSDEEP
196608:c8DUtsdulsPScjzrsVmgQ9POWCml0fei8Du:a2Bbj0DQ9POWCmlU8Du
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1660 2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe 1660 2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-02_60396c4155abb8e19cd2282ee477c75b_hacktools_icedid.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1660