Analysis
-
max time kernel
13s -
max time network
114s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
24-03-2021 17:45
Static task
static1
Behavioral task
behavioral1
Sample
3765a8767694cecb115d5e61f3c15799b9bc29da7f646037f47fedeafab0577a.dll
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3765a8767694cecb115d5e61f3c15799b9bc29da7f646037f47fedeafab0577a.dll
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
3765a8767694cecb115d5e61f3c15799b9bc29da7f646037f47fedeafab0577a.dll
-
Size
79KB
-
MD5
8ffd54136613bd59e7d3e5f7072a8261
-
SHA1
a01e6945e481b8233ab041fbde2b6ebcf6ead349
-
SHA256
3765a8767694cecb115d5e61f3c15799b9bc29da7f646037f47fedeafab0577a
-
SHA512
b9b5a443522654d54a3a0a392f81ffb16260ca1804ea36d4321602d4ac2d7abc0c773052c562646d28c4de6199a4383a0a1503387c75ead357728c1c2d3300f3
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
1211238709
C2
912caporers.fun
Signatures
-
IcedID First Stage Loader 1 IoCs
Processes:
resource yara_rule behavioral2/memory/4704-2-0x0000000000EC0000-0x0000000000EC7000-memory.dmp IcedidFirstLoader -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
regsvr32.exepid process 4704 regsvr32.exe 4704 regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4704-2-0x0000000000EC0000-0x0000000000EC7000-memory.dmpFilesize
28KB