Overview

overview

10

Static

static

10

756-54-0x0...ry.dll

windows7_x64

1

756-54-0x0...ry.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    756-54-0x00000000003A0000-0x00000000003A5000-memory.dmp

  • Size

    20KB

  • Sample

    220225-amsbmafcaj

  • MD5

    b65d27126755d954d6f94d3d2cb51abf

  • SHA1

    2612ba9487de61f56c888b6fa2cdb0e9c14fd800

  • SHA256

    fd2f10aa7c96d648e82ca3d76dfd1015a62bf921f3c1296746af4b4b45d54e9f

  • SHA512

    ceb0961a6e86d764a847ab62a5ffdadd52dbaeff041a379044015d08d84fc7a30ac040a6b7fbad8def2defffd8de93a81cb2fac83e60135133dc176e509a144e

Score
10/10
icedid

Malware Config

Targets

    • Target

      756-54-0x00000000003A0000-0x00000000003A5000-memory.dmp

    • Size

      20KB

    • MD5

      b65d27126755d954d6f94d3d2cb51abf

    • SHA1

      2612ba9487de61f56c888b6fa2cdb0e9c14fd800

    • SHA256

      fd2f10aa7c96d648e82ca3d76dfd1015a62bf921f3c1296746af4b4b45d54e9f

    • SHA512

      ceb0961a6e86d764a847ab62a5ffdadd52dbaeff041a379044015d08d84fc7a30ac040a6b7fbad8def2defffd8de93a81cb2fac83e60135133dc176e509a144e

    Score
    10/10

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks