Analysis
-
max time kernel
94s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 12:50
General
-
Target
2024-11-19_28503a9c588d0094acecb1579d23e4ec_hacktools_hijackloader_icedid_luca-stealer_nymaim.exe
-
Size
10.1MB
-
MD5
28503a9c588d0094acecb1579d23e4ec
-
SHA1
3612c0d9241743bd76b1d91902ce05881be14b4c
-
SHA256
f06fc6e637fb3aa60707802341bebbbf7c3d1397ac776e684f1222bf5e4cfa69
-
SHA512
31cfd47ff46e540101a165cdb4465b3fe6b5820502ec32eb73ce07b4dc46244f81147c937839a6433d86708d10295364b80edafb68511d658733c5a6b38e1778
-
SSDEEP
196608:wozi9spuq2Rj7Mecc2hiLlv0Yn3Q2daGuuwfJVl:GqwMUFn3jdKf1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-19_28503a9c588d0094acecb1579d23e4ec_hacktools_hijackloader_icedid_luca-stealer_nymaim.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-19_28503a9c588d0094acecb1579d23e4ec_hacktools_hijackloader_icedid_luca-stealer_nymaim.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3836 -s 6322⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3836 -ip 38361⤵