Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2024 13:45
Behavioral task
behavioral1
Sample
2024-09-13_d6e43af2a5f2551b52fddcb395984630_bkransomware_floxif_icedid.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-13_d6e43af2a5f2551b52fddcb395984630_bkransomware_floxif_icedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-13_d6e43af2a5f2551b52fddcb395984630_bkransomware_floxif_icedid.exe
-
Size
2.5MB
-
MD5
d6e43af2a5f2551b52fddcb395984630
-
SHA1
e90ddfab425556050a6670592fc96c613ad144d9
-
SHA256
7a71c4a3c53d5d618384143ac139781574e6bbd727d7f6c100331f1a5580d00e
-
SHA512
cd6d18421a33f4c4d8131883819ef9426f1c27478550af387e34f3ed8c034d80e78bbb725c018f8bac531d3ac138491bcebd936794fe64ddea52bf1b3bd3a6eb
-
SSDEEP
49152:yL0dIH+mzTCEvmhW3v8xGaaaJIER7mK5yJ4atqHM5jS0MZeTi:yodIH+mnCBhW/8xGaAENmK5yJ4ataM5m
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-13_d6e43af2a5f2551b52fddcb395984630_bkransomware_floxif_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-13_d6e43af2a5f2551b52fddcb395984630_bkransomware_floxif_icedid.exe"1⤵PID:2112
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1904,i,8293235976513689021,7261015831736501466,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:81⤵PID:1656