Analysis
- max time kernel
149s - max time network
144s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 10:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target 2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe
- Size 1.4MB
- Sample260601-mcf7tsbs6p
- SHA256 b26946940f756edb917d0832d32740039c16d5bab0489e5f288608fc48e0431f
- MD5 f2d3618191bd89493c768889d9812c9a
- SHA1 6bd7f97d7d11524e28300cf6e85f89b28681012a
- SHA512 19fcbd08cabfc2ad43d35c655d641cd724ebecd3f4335b05f14f121f5b4921ff9d663d5ef822d0bbbba3849d9ae1cedabba98998e2bf6b1df10bc6f4a06e2aad
- SSDEEP 24576:RUNxvqF6FGYJf6yjNQpNONZNlTX5PlGPgquLEIWxUc7N11QaSYx7GqVH:RUNxvC6FGYJf6yjNQpNONZnTX5PlGPgQ
- TLSH T134659E0733A2C0E9DE6791F2C6299623D732785017289BDB15E06D2EEF93E915F3A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3132 2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3132 2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3132 2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-01_f2d3618191bd89493c768889d9812c9a_icedid.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3132