Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
29-04-2022 16:25
General
-
Target
d2ef5.exe
-
Size
273KB
-
MD5
111680a7201dadbcea03066daf948d5c
-
SHA1
ab21a748037068de8dbdbe98873d5c511a907b51
-
SHA256
fc6e926180ddfcec6d89dba7ebbaa7823664d51d0d6c51c1b1decf81b8aca610
-
SHA512
f19eec4e1655abe0afd371e06ef75049a0606ea6866ca82986d76a0cd3154db595d23193143b1f8b1896c24c4dd721c3b6b86fb595147c34709a03618bb2fa04
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
766074942
C2
rshysytover.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d2ef5.exe"C:\Users\Admin\AppData\Local\Temp\d2ef5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB