Overview

overview

10

Static

static

data.dll

windows7_x64

10

data.dll

windows10_x64

10

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    16-12-2021 03:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    data.dll

  • Size

    216KB

  • MD5

    d721faf1c9c2c602ba55f8040eefc6b0

  • SHA1

    0ff4a6a21c797620dd603d59c8e7fb2a1db7100f

  • SHA256

    b71f914f40d146462cafac5f360f816d59366be377268b33d0d4688917950223

  • SHA512

    534731bf935aaa9c957e71e2e7aeecaa5fe0a9ed68ef09ae5c1d4af1e31fc22c643bf4682fb33114647a7f5f0f28cdd8b0eb237b45e2c219afbda7864e511be5

Score
10/10
icedid971270730bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

971270730

C2

hdgravity.com

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\data.dll
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/968-54-0x000007FEFB801000-0x000007FEFB803000-memory.dmp
    Filesize

    8KB

    Download
  • memory/968-55-0x00000000003D0000-0x0000000000433000-memory.dmp
    Filesize

    396KB

    Download