Analysis
-
max time kernel
137s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
31-05-2022 04:21
Static task
static1
Behavioral task
behavioral1
Sample
goot.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
goot.exe
-
Size
147KB
-
MD5
157d12885e5f6434436862aadd6224cd
-
SHA1
e2f7ef1f9f1c2ca05b0c14520aa6259722141ca3
-
SHA256
a9fc2b58e0e714a5135bff2d7c5c3a1d46359363696bdfa3feaabeb6f6bdc3af
-
SHA512
eead6c46c3fc50787e9d9c72777705667882db116464a55d1b171892cc8a39177b7ffe668b83405048066fb53921990de7245365c093023abd9d8f14ed8c7b16
Malware Config
Extracted
Family
icedid
Campaign
277708695
C2
ilekvoyn.com
Signatures
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
goot.exepid process 2272 goot.exe 2272 goot.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2272-130-0x0000000140000000-0x0000000140008000-memory.dmpFilesize
32KB