Analysis
-
max time kernel
172s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
20-05-2022 03:16
General
-
Target
870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672.exe
-
Size
236KB
-
MD5
02536494a006aae678ac0c2134c72915
-
SHA1
759606e6ce70ebbe2b9c58bf7d80ab0721da3efe
-
SHA256
870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672
-
SHA512
46635664f20f45a96ea37e3b90fcaf13114b022898300ffd74063a04bb429f142b2d71ac5d0b3f0032a7692843ce333cf66599b3fb0a1aa225e614c60570fcae
Score
10/10
Malware Config
Extracted
Family
icedid
C2
loadfifth.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
IcedID First Stage Loader 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672.exe"C:\Users\Admin\AppData\Local\Temp\870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
-
Filesize
12KB