Overview

overview

10

Static

static

a056b2322d...42.exe

windows7-x64

10

a056b2322d...42.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    129s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220721-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-07-2022 14:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142.exe

  • Size

    456KB

  • MD5

    c04f5dc534fa5b1acef3c08d9ab3f3cb

  • SHA1

    fc0e221a14b8e196a4c03859051c5212b91544ac

  • SHA256

    a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142

  • SHA512

    39f23432000e2595563a542b264318cd94fe0a0ab33692a071fc3c44f7956f0002b85af5e6fbb275d98eace954f752922ace6194db86b4c24b68553e5114cc05

Score
10/10
icedid548174735bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

548174735

C2

magnwnce.com

corposted.com

presifered.com

coujtried.com

molinaro.top

amongolia.com

jjanuatu.com
Attributes
  • auth_var

    3

  • url_path

    /index.php

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • IcedID Second Stage Loader 1 IoCs
    loader
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142.exe
    "C:\Users\Admin\AppData\Local\Temp\a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4628-134-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-133-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-136-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-135-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-137-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-138-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-139-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-140-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-141-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-143-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-144-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-145-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-142-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-146-0x00000000029E0000-0x00000000029E7000-memory.dmp
    Filesize

    28KB

    Download
  • memory/4628-147-0x00000000029F0000-0x00000000029F5000-memory.dmp
    Filesize

    20KB

    Download