Analysis
-
max time kernel
129s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
18/09/2022, 13:56
General
-
Target
2599e5761b3e282cc0991911bdb8b775.dll
-
Size
243KB
-
MD5
2599e5761b3e282cc0991911bdb8b775
-
SHA1
1ea493c212ccc7163232871272402ae67fd4cdb9
-
SHA256
0079a4b2e77ec9f91d7539cec8c5303ea3c5103c28446d566da5c9f6aa233086
-
SHA512
32611b7bfc94844cbb0f86be6d8e3c853684634397e12414285073ce30d782192ea6c5076a044006f8a6502ceb2d3028629a01b2ea1e5ca9c1cdf37f01f1a6d8
-
SSDEEP
3072:21qxXQFurh1/S2mCOoOSBOaYmfglEkDe6kua724xuIKh46OpwWpd2WOirE6u+:2o19xbOaNqEklkj1pwR+
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
809191839
C2
allozelkot.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Blocklisted process makes network request 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2599e5761b3e282cc0991911bdb8b775.dll,#11⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
24KB