Overview

overview

10

Static

static

zilifc64.dll

windows7_x64

10

zilifc64.dll

windows10_x64

10

Resubmissions

01-07-2021 10:27

210701-atwzqn42d6 10

08-04-2021 06:27

210408-jscy2dz3dx 1

Analysis

  • max time kernel
    248s
  • max time network
    278s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    01-07-2021 10:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zilifc64.dll

  • Size

    3.0MB

  • MD5

    ec80403b0cd4ba3b0ed9413de7232c79

  • SHA1

    f5a9ba7a22bf1d563a212d38c63856e45b3ba7fd

  • SHA256

    735c6b7461b12b012290b82a437a001456d6d518ae651321428bc8fcb799558f

  • SHA512

    58dd91004aedc5907165b0a66706b4314c4d4c3ea941a1f00c01235c5d81ae180cb728938a9458ec2e280d4957a7ba99ef9ea44b308f0ca144180e235636b640

Score
10/10
icedid1820688957bankertrojan

Malware Config

Extracted

Family

icedid

Botnet

1820688957

C2

timerework.fun

pexxota.space
Attributes
  • auth_var

    2

  • url_path

    /news/

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\zilifc64.dll
    1⤵
      PID:632

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/632-114-0x00007FFAE9100000-0x00007FFAE9564000-memory.dmp
      Filesize

      4.4MB

      Download