Resubmissions
26-01-2022 12:35
220126-psl45acghq 10Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
26-01-2022 12:35
Static task
static1
Behavioral task
behavioral1
Sample
sample.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
sample.dll
Resource
win10-en-20211208
Behavioral task
behavioral3
Sample
sample.dll
Resource
win10v2004-en-20220112
Behavioral task
behavioral4
Sample
sample.dll
Resource
win11
General
-
Target
sample.dll
-
Size
251KB
-
MD5
66c83dab8a955502e979e0ba02c98cf9
-
SHA1
efb731305004457cf3f2698a260d96c784a22adb
-
SHA256
9385db8c3d2cfa98e87d97dbce2df036d3ac2c4d797930f6d400db5b1d4028ec
-
SHA512
e610bf7febfe90191919060dee9a1a2fc0dd1894ea569a9e3a9c4f9ae9c5d6d3eee65c949a587545dddcd84664dfd8f8df482611e3f9540efebffc5ba5afd7a7
Malware Config
Extracted
icedid
1892568649
normyils.com
Signatures
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
regsvr32.exepid process 740 regsvr32.exe 740 regsvr32.exe