Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows10_x64 -
resource
win10-en-20211104 -
submitted
02-12-2021 12:20
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
core.bat
Resource
win10-en-20211104
Behavioral task
behavioral3
Sample
unveilx64.tmp.dll
Resource
win7-en-20211014
Behavioral task
behavioral4
Sample
unveilx64.tmp.dll
Resource
win10-en-20211104
General
-
Target
unveilx64.tmp.dll
-
Size
266KB
-
MD5
3ae61ec5765cc564636444ef50074090
-
SHA1
ad6cda28825457fa1768aaec6bb4971214cc5508
-
SHA256
2c2552940a660ce57eb5527be40f4f139dbf862306cf08c90743a9f22d2cb15e
-
SHA512
28d374770b8099d7e25473a88fbd06cc44b1f03cf818504d643b1fe5951bb9761630dde9691bfc5d2fbaf56368fa4010d7b5108d1d8148d20cc712555cee6464
Malware Config
Extracted
icedid
1892568649
normyils.com
Signatures
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
regsvr32.exepid process 3664 regsvr32.exe 3664 regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3664-118-0x0000000001200000-0x0000000001263000-memory.dmpFilesize
396KB