Overview

overview

10

Static

static

d203c929bc...d4.exe

windows7_x64

1

d203c929bc...d4.exe

windows10-2004_x64

10

Resubmissions

04-05-2022 11:26

220504-nkawfsgchp 10

03-05-2022 00:20

220503-am5xqafgbl 10

Analysis

  • max time kernel
    173s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    03-05-2022 00:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d203c929bc26a2084739943cf7c0af0e65457851969f4cb32a67a71fd30015d4.exe

  • Size

    214KB

  • MD5

    613b311e1586e57c88bff6971ae6abe5

  • SHA1

    e6a52ab3dbb1213ddb55976e391ea94a391fc682

  • SHA256

    d203c929bc26a2084739943cf7c0af0e65457851969f4cb32a67a71fd30015d4

  • SHA512

    add96c45f05259c7af2fd3a416123d20d51076346b6e7454c627afaf061504cf73f7971c181193be317fc68e6dafa72f768c1cd91b55a149d15500f0ccc9008e

Score
10/10
icedidbankerloadertrojan

Malware Config

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • IcedID Second Stage Loader 1 IoCs
    loader

Processes

  • C:\Users\Admin\AppData\Local\Temp\d203c929bc26a2084739943cf7c0af0e65457851969f4cb32a67a71fd30015d4.exe
    "C:\Users\Admin\AppData\Local\Temp\d203c929bc26a2084739943cf7c0af0e65457851969f4cb32a67a71fd30015d4.exe"
    1⤵
      PID:5028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5028-130-0x0000000000400000-0x0000000000458000-memory.dmp
      Filesize

      352KB

      Download