Analysis
-
max time kernel
132s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
29-05-2022 16:38
General
-
Target
71F1C8E85B4187C34451AEA70125E7F21759D7E24ADA3.dll
-
Size
396KB
-
MD5
47d8aebb46cc914d1eec5c4c917907f8
-
SHA1
a0f4517f0ad6ffa3e759b7aac338ad901f5457f0
-
SHA256
71f1c8e85b4187c34451aea70125e7f21759d7e24ada3f74c4d0e6df6d583e4b
-
SHA512
f1adc18ed42b4a2282315e0dd23d933468626c164bcc48c93183a3353365a7e0258f3140fc0afa87cce9a38d845fa200db10e472ac7a6f44d84690ecc1274cba
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
4020654167
C2
actuallycost.top
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\71F1C8E85B4187C34451AEA70125E7F21759D7E24ADA3.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB