Analysis
-
max time kernel
45s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system -
submitted
02-08-2022 16:35
Static task
static1
Behavioral task
behavioral1
Sample
cmd.bat
Resource
win7-20220718-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cmd.bat
Resource
win10v2004-20220721-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
oxygen-x64.dll
Resource
win7-20220715-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
oxygen-x64.dll
Resource
win10v2004-20220721-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
oxygen-x64.dll
-
Size
239KB
-
MD5
79166672591271b2e68455b51aacf5de
-
SHA1
c9d6f428a37e9eecfc30712ef420c6df82ee9667
-
SHA256
6ed8499020fea0c91fde5e2fd2be39434e4d5b65d4d53fca8ab5e82ba0a50f33
-
SHA512
3917ebe5216f593bf087d261481be9fc29ccaf96993501eeab45a480534b1eaa85616e4c3bc3f9d24cfdfff85e9251083da18b35a290dddf6fe7f5de46045226
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
1573268852
C2
peranistaer.top
gruvihabralo.nl
Attributes
-
auth_var
13
-
url_path
/news/
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1972-54-0x0000000180000000-0x0000000180005000-memory.dmpFilesize
20KB