Analysis
- max time kernel
36s - max time network
113s - platform
windows10_x64 - resource
win10v20210408 - submitted
08/10/2021, 18:47
General
- Target 10425b5ca8d775b744dd82a53b6f321c9e5dfd2e.dll
- Size 418KB
- Sample211008-xe665sehcj
- SHA256 8044cb87ea2f5796fde3829f8f45f1540a2c1c425e5adc03d028ce3f737940cf
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
3759666872
C2
-
showsyouthe.top
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\10425b5ca8d775b744dd82a53b6f321c9e5dfd2e.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4000-114-0x0000000000DB0000-0x0000000000DB9000-memory.dmp