Analysis
- max time kernel
165s - max time network
171s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 19:02
Behavioral task
behavioral1
Sample
2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe
- Size 31.9MB
- Sample260724-xpwhdsbk2w
- SHA256 9f6fa59af2d71b9c470037a504975281847bd54758ac655bd19e698fdcc330a7
- MD5 9ce16c7f662e86c83b004d214992085a
- SHA1 cc9d866ff787f573f993405aeae810e016e29b65
- SHA512 873c451b3048f5bfcdcecd826c2992b213c00555ebc5d4a6c9ed163b77d2b83fd4112dc0e92163ccf7bdaaa91d6d6bfd29624025ec3eef03e4666f093e6f80b8
- SSDEEP 786432:4B2K0O/ujz3rNb+/C+CAYjlqddkOhARoSti:4QZ75P+CAYEdBGoSU
- TLSH T1E5772292F65606B1F073923895B6B312E2B17C494F2263F70296B6191F3F6D49EBF201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 5112 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe 5112 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe 5112 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe 5112 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe 5112 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-24_9ce16c7f662e86c83b004d214992085a_cloudeye_elex_icedid.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsh626A.tmp\System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsh626A.tmp\UAC.dll
- Size 13KB
- SHA256 a6d956f28c32e8aa2ab2df13ef52637e23113fab41225031e7a3d47390a6cf13
- MD5 431e5b960aa15af5d153bae6ba6b7e87
- SHA1 e090c90be02e0bafe5f3d884c0525d8f87b3db40
- SHA512 f1526c7e4d0fce8ab378e43e89aafb1d7e9d57ef5324501e804091e99331dd2544912181d6d4a07d30416fe17c892867c593aee623834935e11c7bb385c6a0a8
- SSDEEP 192:vIARvmFvcukSWn8EAKVZ8148Dj33RZgqWVWYuOUEjRuFzEun0J:v2mukSe8EA88pRZAVWYuO3cFznny
- TLSH T1B0524BA597CCCBBFC7511537B98A273257E993303924615FD9631FC92922853A93B302
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsh626A.tmp\nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH