Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/08/2026, 03:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe
- Size 1.2MB
- Sample260812-eafvaavthz
- SHA256 000b268987c40a4143c6f07f8a7d5155534eed0e4863be4bedd34b553146272a
- MD5 32f36897bae84568fd8866ddbf2e5216
- SHA1 6c9267d6e97cd223f3ed878e01cb0b3ee610116c
- SHA512 db9c4ee739802438d6787d7143b55f4d384d353bc86c3c44a95c2025d728a6529e462a92adc24e1624938b765a267322d83d0100827e2f957d13085bddc9cef3
- SSDEEP 24576:BUNxvqF6FGYJf6yjNQpNONZNlTX5PlGPgquLEIWxUc7N11QaSYx7GqKnVYyv:BUNxvC6FGYJf6yjNQpNONZnTX5PlGPgf
- TLSH T1DC459D0733A6C0E8DFA790F2C6255223D772781117389BDB64E06A2DDFA3E915B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1584 2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1584 2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1584 2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1584 2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-12_32f36897bae84568fd8866ddbf2e5216_icedid.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1584