Analysis
-
max time kernel
131s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
23-05-2022 21:28
General
-
Target
12b4d0ba2fdc1f7af5a838e028eea3305a8d067776044c82b02997bec4ea3090.exe
-
Size
82KB
-
MD5
83b5eb867110403cc72819463a807b73
-
SHA1
efc2f8f7584a633103aa568600b977312ecb9dd7
-
SHA256
12b4d0ba2fdc1f7af5a838e028eea3305a8d067776044c82b02997bec4ea3090
-
SHA512
2379e8543022691b67cddb4a2d571c06d949dd6638f72c3569f52908a1449a42aca11ad7a3afa0b3bf884ee64dee388744db87f29a238c6d4ffac7f135f34844
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
2794990697
C2
sheaffic.org
memphase.com
vulcate.com
sheaffic.com
eurobable.com
Attributes
-
auth_var
1
-
url_path
/index.php
Extracted
Family
icedid
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
-
IcedID Second Stage Loader 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\12b4d0ba2fdc1f7af5a838e028eea3305a8d067776044c82b02997bec4ea3090.exe"C:\Users\Admin\AppData\Local\Temp\12b4d0ba2fdc1f7af5a838e028eea3305a8d067776044c82b02997bec4ea3090.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
20KB
-
Filesize
1.7MB