Analysis
- max time kernel
132s - max time network
131s - platform
windows7_x64 - resource
win7v20201028 - submitted
24/03/2021, 21:59
General
- Target 8e9f482f5123c7eef5de4ab08d2f7a9e.dll
- Size 52KB
- Sample210324-4d91c86k7x
- SHA256 0be20197536de0c1f34b289b1012add4f7fd06926f80947559fcf26b6edef39b
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
1211238709
C2
-
feaser2347.club
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- IcedID First Stage Loader 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\8e9f482f5123c7eef5de4ab08d2f7a9e.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/384-2-0x000007FEFB9D1000-0x000007FEFB9D3000-memory.dmp
memory/384-3-0x00000000001B0000-0x00000000001B7000-memory.dmp