Analysis
-
max time kernel
149s -
max time network
77s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
27-04-2022 15:33
Static task
static1
Behavioral task
behavioral1
Sample
986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60.exe
-
Size
386KB
-
MD5
9b0b27e8ff72c99e3592ed1643a3a63a
-
SHA1
643d1dfb9e2edbd627a3ed5c0d3541288a170605
-
SHA256
986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60
-
SHA512
24afa771dd27c07010707cb990494ab227b45fe3a5897f129eb34fece60d0b8e950deecc198d0b7288332c067386dde27d8c95f4a3c6d63815c67337761383d9
Malware Config
Extracted
Family
icedid
C2
freeharritage.top
gohoemmuzlimanz.best
Signatures
-
IcedID Second Stage Loader 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1912-55-0x0000000000880000-0x0000000000962000-memory.dmp IcedidSecondLoader behavioral1/memory/1912-56-0x0000000000880000-0x0000000000886000-memory.dmp IcedidSecondLoader