Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    15-04-2022 13:18

General

  • Target

    bacfc545ab61b454df4a7d8a91cc78cb38daf9068fd5302424d64eea8d4649a6.exe

  • Size

    693KB

  • MD5

    9e91995f53d5a434f619acedea7bd831

  • SHA1

    a39663b44a684c10b865d72d2fef1e401d78b641

  • SHA256

    bacfc545ab61b454df4a7d8a91cc78cb38daf9068fd5302424d64eea8d4649a6

  • SHA512

    18fa7843c422e4ec0da14d73890d0e2ea4ae5d50f371c9e24dab02dabfd6786e6fd7e5b34687508a2d91f617be0f562da937162c7a9238c8b965c4308c42e346

Malware Config

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

  • IcedID First Stage Loader 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bacfc545ab61b454df4a7d8a91cc78cb38daf9068fd5302424d64eea8d4649a6.exe
    "C:\Users\Admin\AppData\Local\Temp\bacfc545ab61b454df4a7d8a91cc78cb38daf9068fd5302424d64eea8d4649a6.exe"
    1⤵
      PID:4840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4840-130-0x0000000000210000-0x00000000002C2000-memory.dmp
      Filesize

      712KB

    • memory/4840-131-0x00000000007E0000-0x00000000007ED000-memory.dmp
      Filesize

      52KB