Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
07-09-2024 19:51
General
-
Target
2024-09-07_aeb30042591e24e72fd427ad39ee2e78_icedid.exe
-
Size
15.8MB
-
MD5
aeb30042591e24e72fd427ad39ee2e78
-
SHA1
60ce49b9efdfb84cbd2a11c8dae3a0f282d630e8
-
SHA256
d593ce3e8a96a6e8176e2f712e7983e669f198b7a8484b589910d3aab70fe8f5
-
SHA512
a4042219b4801181beb75aaad48e5cbd80507cdf1f68c28320b3e83d288704e955a0d73f14b57445739a69490ff89437d0154d7f6f544ce93c0e2af345bc6001
-
SSDEEP
393216:kPFPb1KTnhHCQJTN8D8vaoPbnXLYBsh5dTF8VI:k/KtHvJx8kPbnXLx31
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-07_aeb30042591e24e72fd427ad39ee2e78_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-07_aeb30042591e24e72fd427ad39ee2e78_icedid.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx