Overview

overview

10

Static

static

dart.dll

windows7_x64

10

dart.dll

windows10-2004_x64

10

document.lnk

windows7_x64

10

document.lnk

windows10-2004_x64

10

Analysis

  • max time kernel
    133s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    21-03-2022 19:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dart.dll

  • Size

    148KB

  • MD5

    b20d49ba5d4c4a6e089b895de8949279

  • SHA1

    8f23d9a24ba792706ca19d633f6a925e311670d6

  • SHA256

    db5cabe22595607a408fa30bdf288c0992bff836d2e62f6de98d8757f9805e9b

  • SHA512

    7c45c6565e9e55e9473c707c2001459140016d4133cba5df5083961d6b93d3756ee4a239be5d4c25aa22351f713fb3b564397994d7124a624358f2fbe7e4a540

Score
10/10
icedid3546287305bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3546287305

C2

oceriesfornot.top

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\dart.dll
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2620-130-0x0000000180000000-0x000000018000B000-memory.dmp

    Filesize

    44KB

    Download