Analysis
- max time kernel
119s - max time network
119s - platform
windows7_x64 - resource
win7-en-20211208 - submitted
03/01/2022, 14:57
General
- Target mal_0.bin.dll
- Size 179KB
- Sample220103-sbx2vabde7
- SHA256 8578d45fd02aceddc838ff94e21b10a29deb3e2cc92099c9b54802504c88a56a
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
2507181075
C2
-
vopnoz.com
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\mal_0.bin.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1640-54-0x000007FEFC0E1000-0x000007FEFC0E3000-memory.dmp
memory/1640-56-0x000007FFFFFA0000-0x000007FFFFFA9000-memory.dmp
memory/1640-55-0x000007FFFFFA0000-0x000007FFFFFA9000-memory.dmp
memory/1640-57-0x000007FFFFFA0000-0x000007FFFFFA9000-memory.dmp