Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
08-02-2022 21:00
General
-
Target
658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94.dll
-
Size
607KB
-
MD5
312c1ba3975e1ed9a0122ae2a8d1540e
-
SHA1
7bd06ef45eed15d2b2cda357840bbfa7963e5edb
-
SHA256
658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94
-
SHA512
4688040f647f49736f16cc32b9f8a1203a62ab51e8409f8ed757337b21e084657b8a3db951efe97e1a4d3bea3c969fb64f2b2547c029c4606f3d9e563f7590cf
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
1732687004
C2
keepfootbal.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
40KB
-
Filesize
40KB