Overview

overview

10

Static

static

aee392fa31...da.exe

windows7_x64

10

aee392fa31...da.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    25-06-2022 07:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    aee392fa31d863df3c98ffe7d31ba81ec42a1a7f7525b815bad29f46f9a0a1da.exe

  • Size

    304KB

  • MD5

    c84bf3b108f4008b5657ad663226ad98

  • SHA1

    bd8574ee3501ab0526bde421a816c3d7f008e909

  • SHA256

    aee392fa31d863df3c98ffe7d31ba81ec42a1a7f7525b815bad29f46f9a0a1da

  • SHA512

    64198064f979123a36dbe6f92b4b1ed00b2ee116ab0e45f921344bbf4cd51c90dbf1fc596d68ad0fc069f0fbc55e5bfea10b7427d6eaac4aa3ef935f1862c467

Score
10/10
icedid548174735bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

548174735

C2

magnwnce.com

corposted.com

presifered.com

coujtried.com

molinaro.top

amongolia.com

jjanuatu.com
Attributes
  • auth_var

    3

  • url_path

    /index.php

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • IcedID Second Stage Loader 1 IoCs
    loader
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aee392fa31d863df3c98ffe7d31ba81ec42a1a7f7525b815bad29f46f9a0a1da.exe
    "C:\Users\Admin\AppData\Local\Temp\aee392fa31d863df3c98ffe7d31ba81ec42a1a7f7525b815bad29f46f9a0a1da.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/548-57-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-56-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-58-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-59-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-61-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-60-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-62-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-64-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-63-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-66-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-65-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-68-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-67-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-69-0x0000000075D21000-0x0000000075D23000-memory.dmp
    Filesize

    8KB

    Download
  • memory/548-70-0x0000000000260000-0x0000000000267000-memory.dmp
    Filesize

    28KB

    Download
  • memory/548-71-0x0000000000280000-0x0000000000285000-memory.dmp
    Filesize

    20KB

    Download