Analysis
-
max time kernel
91s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
25-05-2022 12:34
General
-
Target
e6.exe
-
Size
147KB
-
MD5
e674924eee4809915712461ebfb18080
-
SHA1
e737eeb10b729024099aac26ca879ffd19069c6c
-
SHA256
efc3cab100ac7e863a49bdd839e82c6cc1e4f83a2676a83df5f49361f62ae9a6
-
SHA512
cb623ee862aaf21498b47c5bec42b3f4e8e17f76c6ac021c313a1032f92e60b6aa0951693c03bcb93caef5df8b3e18ce54d04da9e929995dadae1c22e3b35efd
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
260931076
C2
ilekvoyn.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e6.exe"C:\Users\Admin\AppData\Local\Temp\e6.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB