Overview

overview

10

Static

static

fil.dll

windows7_x64

10

fil.dll

windows10_x64

10

Analysis

  • max time kernel
    11s
  • max time network
    66s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    21-07-2021 15:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fil.dll

  • Size

    52KB

  • MD5

    2bcd2f354fe045f3ccf2c106ff9d9b50

  • SHA1

    42c85ce8b110fafefc29c2b942b119007d848a9e

  • SHA256

    b9c32de8de6394a6754df593e9be1cea2611d4cabd85b18e19cfbd905ef6d97a

  • SHA512

    ccf2f5fe624398575a009fbbb057cca273bcdb44fb38544344a89092086627af3d0524bcd8ec5b6b61d8bddfa28c831f8306cab9ac4c69046e6e8e9d2b02276e

Score
10/10
icedid3072714083bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

3072714083

C2

feedbackfile.download

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\fil.dll
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4036-114-0x0000000002BC0000-0x0000000002C23000-memory.dmp

    Filesize

    396KB

    Download