Analysis
-
max time kernel
19s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
06-09-2022 15:13
Static task
static1
Behavioral task
behavioral1
Sample
icedID-06.09.2020/documents.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
icedID-06.09.2020/documents.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
icedID-06.09.2020/rap/enquire.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
icedID-06.09.2020/rap/enquire.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
icedID-06.09.2020/rap/reconsolidating.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
icedID-06.09.2020/rap/reconsolidating.dll
Resource
win10v2004-20220812-en
General
-
Target
icedID-06.09.2020/documents.lnk
-
Size
1KB
-
MD5
ad962f186df7da5e5efca61555fc47ed
-
SHA1
9045ba63201225996bcd680cc762c56eb0a7a761
-
SHA256
3ca66f8b12394d093fd6095c072922bf8ad718a7d0bca490eaba752766fd3b23
-
SHA512
2144040581eeeac31788793db91a6d2d1cd145c08a7f84208c6e15d7add9d098999ac6879a56cbf4c57fcc92f128d8bb3d703b513c3898daa7b01b545f65ffb4
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1456-54-0x000007FEFBDE1000-0x000007FEFBDE3000-memory.dmpFilesize
8KB