5c7423a94bdf20c3a494de0f77230fa4b34a6571bf0f01fbcc252b12490afd2d | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
09-06-2022 21:46

Sharing

Report Analysis Logs

General

Target

icedid_0000000000170000_unpacked.dll
Size

16KB
MD5

92f2c82482bab219e0ec89731ddcf764
SHA1

8d4f7cf6a9f8a524a9cb63b5ced9265c3558efd5
SHA256

5c7423a94bdf20c3a494de0f77230fa4b34a6571bf0f01fbcc252b12490afd2d
SHA512

9ef237d77de6e37d3c09dd462aa7755cf337059256ba6e61f9d1e849e4402deb15b15582e1aeac8065453785c4e4483afb0b9a1c0f7da2f8337cb06c6559893e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

rundll32.exe

pid process

1948 rundll32.exe
1948 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\icedid_0000000000170000_unpacked.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads