Static task
static1
Behavioral task
behavioral1
Sample
2024-09-21_b38770a8737cc940b0db3ac143a5ad0d_hijackloader_icedid.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-21_b38770a8737cc940b0db3ac143a5ad0d_hijackloader_icedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-21_b38770a8737cc940b0db3ac143a5ad0d_hijackloader_icedid
-
Size
4.7MB
-
MD5
b38770a8737cc940b0db3ac143a5ad0d
-
SHA1
67b9227829e46915a470c9b8c9d070c40d67f2ea
-
SHA256
542e67f4d2668bb92c492b75015fc68eebc70c204dab4bf4ee19ba6505dc93ed
-
SHA512
7455f42985b43f11f45289de059b86ddc6cd3d21519702224ab0ddc81ed30def93be7f88839557437e987fbd96d0ffe5251076082b7429761d4bcfe7a5a82b78
-
SSDEEP
98304:xFmsmufp76bNU2SgWD1JGqap4lMIr5oRwMMfIzElAvstr9yA+juYJG7kFbG:xFmsiUngWDjGqapgOuliuYJG7kM
Malware Config
Signatures
Files
-
2024-09-21_b38770a8737cc940b0db3ac143a5ad0d_hijackloader_icedid.exe windows:6 windows x86 arch:x86
318ab6fca99eae5434a0ee77f54077b0
Code Sign
30:4b:0b:72:a6:c0:29:83:4e:47:33:1c:c5:1c:8f:36Certificate
IssuerO=Ingo H. de Boer,C=DE,1.2.840.113549.1.9.1=#0c0f6964624077696e67656e6f2e6f7267Not Before19/03/2017, 13:56Not After30/12/2999, 23:00SubjectO=Ingo H. de Boer,C=DE,1.2.840.113549.1.9.1=#0c0f6964624077696e67656e6f2e6f72670e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21/09/2022, 00:00Not After21/11/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
80:41:8c:37:73:1d:4b:7a:49:22:5f:68:13:1e:65:38:15:1f:9f:66:72:f4:36:f9:6d:18:6a:79:aa:7c:0f:3fSigner
Actual PE Digest80:41:8c:37:73:1d:4b:7a:49:22:5f:68:13:1e:65:38:15:1f:9f:66:72:f4:36:f9:6d:18:6a:79:aa:7c:0f:3fDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
GetNextDlgTabItem
MapDialogRect
DeleteMenu
SetParent
NotifyWinEvent
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SetCursorPos
DestroyCursor
UnionRect
CopyAcceleratorTableA
LoadAcceleratorsW
ShowOwnedPopups
MonitorFromPoint
CopyImage
LoadImageW
DrawIcon
SetWindowRgn
GetTabbedTextExtentW
PostThreadMessageA
CreateMenu
WaitMessage
GetMenuDefaultItem
GetNextDlgGroupItem
GetIconInfo
HideCaret
InvertRect
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongA
UpdateLayeredWindow
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
CharUpperBuffA
GetUpdateRect
SubtractRect
MonitorFromRect
GetWindowRgn
GetAncestor
SystemParametersInfoW
ShowCaret
GetCaretBlinkTime
SetWindowLongW
DestroyCaret
CreateCaret
SetCaretPos
RegisterClassExW
MsgWaitForMultipleObjects
UnregisterClassW
SendMessageW
CreateWindowExW
PostMessageW
GetUpdateRgn
DefWindowProcW
RegisterClipboardFormatW
GetWindowLongW
DrawTextW
CreateIconIndirect
GetMonitorInfoW
CallWindowProcW
IsIconic
GetLastActivePopup
GetClassLongA
TrackPopupMenuEx
GetMenuStringA
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
EndDeferWindowPos
BeginDeferWindowPos
FindWindowExA
UnregisterClassA
SetRect
DrawEdge
GetMenu
FrameRect
CreateDialogIndirectParamA
CheckDlgButton
TranslateMessage
ReuseDDElParam
UnpackDDElParam
TrackMouseEvent
CallWindowProcA
CallNextHookEx
GetWindowLongA
GetForegroundWindow
UnhookWindowsHookEx
SetWindowsHookExA
GetMenuItemRect
SetMenuItemInfoA
GetSystemMenu
IsMenu
GetPropA
RemovePropA
SetPropA
LoadBitmapA
GetMenuItemInfoA
WindowFromPoint
DispatchMessageA
GetMessageA
GetDlgCtrlID
DrawFrameControl
GetWindowDC
GetWindowTextA
LockWindowUpdate
SetWindowPos
GetClassNameA
GetTopWindow
InsertMenuA
CreatePopupMenu
GetMenuItemID
AppendMenuA
GetMenuItemCount
CheckMenuRadioItem
ModifyMenuA
RemoveMenu
SetForegroundWindow
GetClipboardData
IsClipboardFormatAvailable
SetDlgItemTextA
CopyIcon
GetMessagePos
SetTimer
SetWindowLongA
KillTimer
PostQuitMessage
PeekMessageA
IsWindow
LoadIconA
SetActiveWindow
MessageBeep
GetDlgItem
ShowWindow
DdeClientTransaction
PostMessageA
IsZoomed
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DrawFocusRect
ClientToScreen
DrawIconEx
LoadImageA
GetWindow
RegisterClipboardFormatA
GetFocus
IsChild
EnableMenuItem
EqualRect
LoadCursorW
GetCapture
MoveWindow
MapVirtualKeyA
DestroyIcon
DrawStateA
GetKeyState
IntersectRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
LoadCursorA
RedrawWindow
GetWindowRect
CheckMenuItem
GetKeyNameTextA
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
AdjustWindowRectEx
GetWindowTextLengthA
InsertMenuItemA
TranslateAcceleratorA
LoadAcceleratorsA
GetActiveWindow
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageA
GetSubMenu
LoadMenuW
IsWindowVisible
ReleaseCapture
SetCursor
ScreenToClient
GetCursorPos
EnableScrollBar
SetScrollPos
GetAsyncKeyState
CopyRect
LoadBitmapW
BringWindowToTop
MapWindowPoints
SetCapture
PtInRect
OffsetRect
GetParent
SendMessageA
GetSystemMetrics
InflateRect
ShowScrollBar
GetScrollRange
SetScrollRange
FillRect
IsRectEmpty
GetClientRect
EnableWindow
SetRectEmpty
UpdateWindow
InvalidateRect
SystemParametersInfoA
ReleaseDC
GetDC
GetSysColorBrush
GetSysColor
GetScrollPos
ScrollWindow
ValidateRect
TrackPopupMenu
SetFocus
DeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
DefWindowProcA
GetMessageTime
CharUpperA
RealChildWindowFromPoint
SetWindowTextA
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
wsprintfA
DdeDisconnect
DdeFreeDataHandle
DdeCreateDataHandle
DdeFreeStringHandle
DdeCreateStringHandleA
DdeInitializeA
DdeConnect
GetDCEx
MessageBoxA
DrawMenuBar
GetMenuState
SendDlgItemMessageA
RegisterWindowMessageA
kernel32
lstrcmpA
FindClose
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrlenA
GetCurrentThreadId
CreateEventA
GetTickCount
GetLastError
WaitForSingleObject
ResumeThread
GetModuleFileNameA
FreeEnvironmentStringsW
CreateFileW
Sleep
lstrcpyA
ReadFile
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
CompareStringW
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetWindowsDirectoryA
GetTimeFormatW
FindResourceA
GetDateFormatW
GetCommandLineW
GetCommandLineA
GetFileType
SetStdHandle
FreeLibraryAndExitThread
ExitThread
SetThreadPriority
TerminateThread
HeapFree
CreateThread
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
LoadLibraryA
GetProcAddress
FreeLibrary
HeapQueryInformation
ExitProcess
ResetEvent
SetCurrentDirectoryW
GetModuleHandleA
SetEnvironmentVariableW
GetFullPathNameW
GetDriveTypeW
VirtualQuery
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
DeleteFileA
GetFileAttributesA
GetSystemTime
SystemTimeToFileTime
FormatMessageA
LocalFree
RtlUnwind
OutputDebugStringW
SetEvent
CloseHandle
GetExitCodeThread
lstrcatA
WinExec
GetEnvironmentStringsW
GlobalLock
OpenFileMappingA
GlobalSize
GlobalFree
CreateProcessA
CreatePipe
DuplicateHandle
GetCurrentProcess
GetStdHandle
IsValidCodePage
WriteFile
FlushFileBuffers
FindNextFileW
FindFirstFileExW
LocalAlloc
CreateDirectoryW
ReadConsoleW
GlobalReAlloc
CopyFileA
GlobalAlloc
GlobalUnlock
MultiByteToWideChar
GetLocaleInfoA
MulDiv
GetTempPathA
GetTempFileNameA
GetPrivateProfileStringA
GetCurrentDirectoryW
FindResourceW
WritePrivateProfileStringA
LoadResource
SetFilePointerEx
lstrcpynA
LockResource
SizeofResource
GetConsoleMode
WideCharToMultiByte
WriteConsoleW
GetConsoleOutputCP
GetCurrentProcessId
SetLastError
OutputDebugStringA
GetModuleFileNameW
GetModuleHandleW
LoadLibraryW
GlobalFlags
CompareStringA
GetFullPathNameA
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
GetVolumeInformationA
LoadLibraryExA
GetShortPathNameA
lstrcmpiA
MoveFileA
GetThreadLocale
GetStringTypeExA
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
SuspendThread
GetTickCount64
GetProfileIntA
VirtualProtect
GetDiskFreeSpaceA
GetFileTime
SetFileTime
ReplaceFileA
GetUserDefaultLCID
GetVersionExA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetPrivateProfileIntA
ReleaseMutex
CreateMutexA
GetCurrentThread
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalReAlloc
SetErrorMode
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
GetACP
FindResourceExW
VerSetConditionMask
VerifyVersionInfoA
SearchPathA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LCMapStringW
InitOnceComplete
InitOnceBeginInitialize
QueryPerformanceFrequency
GetStringTypeW
RaiseException
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetNativeSystemInfo
InitializeCriticalSectionEx
LCMapStringEx
CompareStringEx
gdi32
CreatePatternBrush
ExcludeClipRect
CreateHatchBrush
CreateRectRgnIndirect
GetCurrentPositionEx
Polygon
GetObjectType
GetViewportExtEx
RoundRect
SetGraphicsMode
CreatePalette
GetGraphicsMode
PtVisible
Escape
GetTextExtentPoint32A
GetDIBits
GetWindowExtEx
RealizePalette
SelectClipRgn
CreateRectRgn
IntersectClipRect
PatBlt
SelectPalette
SelectObject
DeleteDC
CreateBitmap
GetBkColor
RestoreDC
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetTextMetricsA
EnumFontFamiliesExA
ExtTextOutA
TextOutA
RectVisible
GetObjectA
CreateFontIndirectA
SaveDC
Rectangle
SetPixel
GetTextCharsetInfo
ExtSelectClipRgn
SetBkMode
GetTextExtentExPointW
GetTextExtentExPointA
GetTextMetricsW
GetObjectW
CreateFontIndirectW
ExtTextOutW
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
CreateDIBSection
GetPixel
GetBoundsRect
FrameRgn
FillRgn
OffsetRgn
GetRgnBox
DeleteObject
GetDeviceCaps
CreatePen
SetLayout
CreateRoundRectRgn
GetLayout
SetMapMode
SetPolyFillMode
SetROP2
SetStretchBltMode
CreateSolidBrush
Polyline
CreatePolygonRgn
SetDIBColorTable
StretchBlt
EnumFontFamiliesA
CreateDIBitmap
ExtCreatePen
Ellipse
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
GetTextFaceA
GetWindowOrgEx
GetTextExtentPoint32W
GetTextExtentPointA
GetTextAlign
SetViewportExtEx
GetStretchBltMode
SetViewportOrgEx
SetWindowExtEx
GetPolyFillMode
GetNearestColor
GetBkMode
SetWindowOrgEx
BitBlt
GetTextColor
GetCurrentObject
DPtoLP
CreateFontA
StartDocA
StartPage
SetTextColor
SetBkColor
SetTextAlign
MoveToEx
LineTo
EndPage
EndDoc
GetROP2
LPtoDP
CreateEllipticRgn
GetCharWidthA
GetViewportOrgEx
SetAbortProc
AbortDoc
SetRectRgn
CombineRgn
GetClipBox
CreateDCA
CopyMetaFileA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
comctl32
ImageList_AddMasked
ImageList_GetImageInfo
ord8
ImageList_GetIcon
_TrackMouseEvent
ImageList_Draw
ImageList_Add
ord17
advapi32
RegOpenKeyExW
AllocateAndInitializeSid
RegEnumKeyExA
RegEnumKeyA
RegCreateKeyExA
RegDeleteValueA
GetFileSecurityA
RegDeleteKeyA
GetTokenInformation
RegCloseKey
OpenProcessToken
RegQueryValueA
FreeSid
RegOpenKeyExA
CheckTokenMembership
SetFileSecurityA
RegEnumValueA
RegSetValueExA
RegSetValueA
RegQueryValueExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shell32
ExtractIconA
DragFinish
SHGetDesktopFolder
SHGetFileInfoA
DragAcceptFiles
ShellExecuteExA
SHBrowseForFolderA
SHAddToRecentDocs
ShellExecuteA
DragQueryFileA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHAppBarMessage
rpcrt4
UuidCreate
oleaut32
VariantChangeType
SysAllocString
VariantClear
VariantCopy
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
LoadTypeLi
VarDateFromStr
SysAllocStringLen
GetErrorInfo
OleLoadPicture
comdlg32
PageSetupDlgA
PrintDlgA
shlwapi
StrFormatKBSizeA
UrlUnescapeA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathCanonicalizeA
PathRelativePathToA
PathIsRelativeA
PathFileExistsA
crypt32
CertFreeCertificateContext
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoCreateGuid
OleLockRunning
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoUninitialize
CoInitialize
OleRun
CoCreateInstance
GetHGlobalFromStream
CreateStreamOnHGlobal
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
uxtheme
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
GetThemeColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText
oledlg
ord8
wininet
HttpQueryInfoA
InternetCanonicalizeUrlA
InternetErrorDlg
InternetCloseHandle
InternetOpenA
InternetSetStatusCallback
InternetConnectA
HttpOpenRequestA
InternetQueryOptionA
InternetSetOptionA
HttpSendRequestA
InternetReadFile
InternetCrackUrlA
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmGetContext
winmm
PlaySoundA
Exports
Exports
_CreateLexer@4
_GetLexerCount@0
_GetLexerFactory@4
_GetLexerName@12
_GetLibraryPropertyNames@0
_GetNameSpace@0
_LexerNameFromID@4
_SetLibraryProperty@8
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 989KB - Virtual size: 989KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 423KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ