Analysis
-
max time kernel
131s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26-09-2022 15:52
General
-
Target
9d2db15627d67ead31cbcd1f5bcdb57c.dll
-
Size
317KB
-
MD5
9d2db15627d67ead31cbcd1f5bcdb57c
-
SHA1
530b7c68696c5d0cd1e5288585b986c1f19f2fca
-
SHA256
6d6f93be1849c4fb0ac660f6ab6c4a2f8e7a1fe081670af3abfa5754f4743c25
-
SHA512
4631e3a9f6b9b9d6348da7ffe7764bf1d2f2207eb10c6f78b7bf102353b1bae04a0f8c5d2183bcbaea022d111d23019aa9871e82241f5a707382008e982c73b2
-
SSDEEP
6144:sJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvL:A9kP7I/sm2lfv29pgEhhL
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
1023645195
C2
trallfasterinf.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Blocklisted process makes network request 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\9d2db15627d67ead31cbcd1f5bcdb57c.dll,#11⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
24KB