Overview

overview

10

Static

static

b9e6cbeb94...ec.dll

windows7_x64

10

b9e6cbeb94...ec.dll

windows10_x64

10

Analysis

  • max time kernel
    14s
  • max time network
    110s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    26-04-2021 05:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b9e6cbeb944818165848350f9c2a07ec.dll

  • Size

    126KB

  • MD5

    b9e6cbeb944818165848350f9c2a07ec

  • SHA1

    4f85e6e2c1c40616567101e1f4e52ae1d12a1339

  • SHA256

    c5d2f656db9286b7a7b2d55fc4cbc586efe15d7be44913d6a92fcd3240e526a1

  • SHA512

    933df95c571d998b1812ffd8b132e7012b3f51ff5c8818234512905ae6f763f4972b492fcd3def50dc221984176738cbeebc6b97fc07451bf04322b5f0733c1c

Score
10/10
icedid3451764797bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

3451764797

C2

federallissimus.casa

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\b9e6cbeb944818165848350f9c2a07ec.dll
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/624-114-0x0000000002DB0000-0x0000000002DF6000-memory.dmp

    Filesize

    280KB

    Download