Analysis
-
max time kernel
149s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
27-04-2022 15:33
Static task
static1
Behavioral task
behavioral1
Sample
42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588.exe
-
Size
386KB
-
MD5
1a0c60a67a3d71862b8631d2dc359e3b
-
SHA1
dd38e197d21a8746502541fa72b4f37fc22c940f
-
SHA256
42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588
-
SHA512
b01b0ffd9e07fc5807d6fd92a5ec2cf350d928a973cae8012f7bbcfb3642caae0d457231a810ab77839f81c4ae49dd000f88d98e5af8a759845e6bf69dd4376c
Malware Config
Extracted
Family
icedid
C2
freeharritage.top
gohoemmuzlimanz.best
Signatures
-
IcedID Second Stage Loader 2 IoCs
Processes:
resource yara_rule behavioral2/memory/1984-130-0x0000000000980000-0x0000000000A62000-memory.dmp IcedidSecondLoader behavioral2/memory/1984-131-0x0000000000980000-0x0000000000986000-memory.dmp IcedidSecondLoader