General
-
Target
008a674e33435ce0b892d0a68ac6d01f9606c040da87b21a10ed069729ee04ff
-
Size
164KB
-
Sample
220224-ymkhsadeg8
-
MD5
5cee9f5471e84ef4df2733d371e019d9
-
SHA1
8f3d62d73b70267156e40a3cebe16430718aa4d4
-
SHA256
008a674e33435ce0b892d0a68ac6d01f9606c040da87b21a10ed069729ee04ff
-
SHA512
69758a183204feed5ced5e1838c58e309861da098f4b54a8f758bf520b0e1a326687a2b0f19e97209f118b39c95545fe9b1b585f859e25857b9043816c88092a
Static task
static1
Behavioral task
behavioral1
Sample
008a674e33435ce0b892d0a68ac6d01f9606c040da87b21a10ed069729ee04ff.dll
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
008a674e33435ce0b892d0a68ac6d01f9606c040da87b21a10ed069729ee04ff.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
icedid
2354879232
gadverjo.com
hevciak.com
reseptors.com
smallbadcity.com
-
auth_var
13
-
url_path
/news/
Targets
-
-
Target
008a674e33435ce0b892d0a68ac6d01f9606c040da87b21a10ed069729ee04ff
-
Size
164KB
-
MD5
5cee9f5471e84ef4df2733d371e019d9
-
SHA1
8f3d62d73b70267156e40a3cebe16430718aa4d4
-
SHA256
008a674e33435ce0b892d0a68ac6d01f9606c040da87b21a10ed069729ee04ff
-
SHA512
69758a183204feed5ced5e1838c58e309861da098f4b54a8f758bf520b0e1a326687a2b0f19e97209f118b39c95545fe9b1b585f859e25857b9043816c88092a
Score10/10-
Suspicious use of NtCreateProcessExOtherParentProcess
-