Overview
overview
10Static
static
8challenge-...64.dll
windows7-x64
10challenge-...64.dll
windows10-2004-x64
10challenge-...st.hta
windows7-x64
1challenge-...st.hta
windows10-2004-x64
1challenge-...st.dll
windows7-x64
10challenge-...st.dll
windows10-2004-x64
10challenge-...1.docm
windows7-x64
10challenge-...1.docm
windows10-2004-x64
10challenge-...c.pcap
windows7-x64
3challenge-...c.pcap
windows10-2004-x64
3Analysis
-
max time kernel
125s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
03-08-2022 12:26
Behavioral task
behavioral1
Sample
challenge-files/challenge-files/Tetoomdu64.dll
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
challenge-files/challenge-files/Tetoomdu64.dll
Resource
win10v2004-20220721-en
Behavioral task
behavioral3
Sample
challenge-files/challenge-files/collectionBoxConst.hta
Resource
win7-20220718-en
Behavioral task
behavioral4
Sample
challenge-files/challenge-files/collectionBoxConst.hta
Resource
win10v2004-20220721-en
Behavioral task
behavioral5
Sample
challenge-files/challenge-files/collectionBoxConst.dll
Resource
win7-20220718-en
Behavioral task
behavioral6
Sample
challenge-files/challenge-files/collectionBoxConst.dll
Resource
win10v2004-20220721-en
Behavioral task
behavioral7
Sample
challenge-files/challenge-files/docs 06.02.2021.docm
Resource
win7-20220715-en
Behavioral task
behavioral8
Sample
challenge-files/challenge-files/docs 06.02.2021.docm
Resource
win10v2004-20220721-en
Behavioral task
behavioral9
Sample
challenge-files/challenge-files/infection-traffic.pcap
Resource
win7-20220718-en
Behavioral task
behavioral10
Sample
challenge-files/challenge-files/infection-traffic.pcap
Resource
win10v2004-20220721-en
General
-
Target
challenge-files/challenge-files/Tetoomdu64.dll
-
Size
396KB
-
MD5
6ed61b28923f1894663174a13a9a789f
-
SHA1
787447b91095e8bb4f696a69c4b7cbaaf302e8c1
-
SHA256
3ed5d0476d1ce4fd325666072983d295609fe94c5b65d5db47a53f462ac7a4dc
-
SHA512
5d800fcb3ba63087d55992d9becd5db3a74ad18f75a84f2cae12faae50eb895f0482a6b3b069ddbc31033ee4f88279e4e33339a9058dac9425b628f1015c5ac7
Malware Config
Extracted
icedid
987543880
fimlubindu.top
vindurualeg.top
bigcostarikas.top
extrimefigim.top
-
auth_var
6
-
url_path
/news/
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4188-130-0x0000000001280000-0x0000000001285000-memory.dmpFilesize
20KB