Analysis
-
max time kernel
4294180s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20220223-en -
submitted
08-03-2022 18:45
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
core.bat
Resource
win10v2004-en-20220113
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
pistol32.dll
Resource
win7-20220223-en
windows7_x64
0 signatures
0 seconds
General
-
Target
pistol32.dll
-
Size
43KB
-
MD5
55c3137ff1fb18f315a42e41e00c97a1
-
SHA1
b798ce92577de625ae4f4cbd15a5b37f832e142d
-
SHA256
58d60dbbfde0e93ed83c1656660252fc6d192532cbd5d122c39c0481848a22f2
-
SHA512
a9b7ad7825c06296a01a02a6fc287c231470b9ad105ee6d5a5006c5521eed3a41d0f99b4c97262dad0a718b62bb25e52ec0fd469fad8699f8ab651ffcf14b4d2
Malware Config
Extracted
Family
icedid
Botnet
273095221
C2
loniferast.top
hoseonlin.top
fallhuma.top
nefitsonyo.xyz
Attributes
-
auth_var
1
-
url_path
/news/