7b7f30fad26fbbcaa73b131523c7158059a17baca3f72e79b17acacb96a17127

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
20/03/2025, 22:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2025-03-20_3c1bdfd9e86ebd54c3a8c0a1445f9c41_icedid.exe
Size

8KB
MD5

3c1bdfd9e86ebd54c3a8c0a1445f9c41
SHA1

ab0c263780dd93af6b9b07324cdefd5a83ff6e5c
SHA256

7b7f30fad26fbbcaa73b131523c7158059a17baca3f72e79b17acacb96a17127
SHA512

0ae2077d5966347a9ba729ec668761e3e35fa375eb3bb72aef3e8b3b4877c8035302bcf0ab8fd5e2f2bfa7d67f43889a354688f6392cd7fbd3ddac3786281979
SSDEEP

192:/56iXvwj608jijUhR4CbvpSC0Ss9CBk66R:/5VfRhRZpxA9CBk

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2025-03-20_3c1bdfd9e86ebd54c3a8c0a1445f9c41_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2025-03-20_3c1bdfd9e86ebd54c3a8c0a1445f9c41_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-20_3c1bdfd9e86ebd54c3a8c0a1445f9c41_icedid.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads