Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
14-07-2022 16:16
Static task
static1
Behavioral task
behavioral1
Sample
cmd.bat
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
cmd.bat
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
divert_32.dll
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
divert_32.dll
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
divert_32.dll
-
Size
45KB
-
MD5
9fd62e4f8a094f59b60b85e9402f9636
-
SHA1
174850d2691ff8495a72a404bc02919d9a90d050
-
SHA256
4f8ed2b9c81976bab40248b15472ff50897c69fed414a03c10cdc8772b152742
-
SHA512
8cd10d5175bae76574185b943ca98758bf2e1e78a338592c859b2ba45406bcf83387d4484c9de4ead772c95ea15775beb4c406958b0850cac161f52124bc5a88
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
1573268852
C2
peranistaer.top
gruvihabralo.nl
Attributes
-
auth_var
4
-
url_path
/news/
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1324-54-0x0000000180000000-0x0000000180005000-memory.dmpFilesize
20KB