General
-
Target
myersforac-invoice-09.26.22.doc
-
Size
866KB
-
Sample
220926-wd1gjacffk
-
MD5
7d29833baf3cf0db6ab6cc26373c1c76
-
SHA1
387c7e3918b052496d5e23df85188fe8f303a939
-
SHA256
b2b88327ebf5d1cdada40abb354b17c0b6963f60b06726bd61c1b8b38a0f5291
-
SHA512
bf14b696d2218c193e9f6cbdbcf6741a8f7867beb295baa9f4c26ad12f5aa6d1181a2939b5a2cdc225f1b83309b78ac3dfbb0c29bf5f880001dfb478be2dd43e
-
SSDEEP
12288:lYcVE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DEgYjfHGlvYH9q6d8:lYcV2jUeQRI5wPN/L0fHjH9qp
Behavioral task
behavioral1
Sample
myersforac-invoice-09.26.22.docm
Resource
win7-20220812-en
Malware Config
Extracted
icedid
742081363
Extracted
icedid
742081363
scainznorka.com
Targets
-
-
Target
myersforac-invoice-09.26.22.doc
-
Size
866KB
-
MD5
7d29833baf3cf0db6ab6cc26373c1c76
-
SHA1
387c7e3918b052496d5e23df85188fe8f303a939
-
SHA256
b2b88327ebf5d1cdada40abb354b17c0b6963f60b06726bd61c1b8b38a0f5291
-
SHA512
bf14b696d2218c193e9f6cbdbcf6741a8f7867beb295baa9f4c26ad12f5aa6d1181a2939b5a2cdc225f1b83309b78ac3dfbb0c29bf5f880001dfb478be2dd43e
-
SSDEEP
12288:lYcVE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DEgYjfHGlvYH9q6d8:lYcV2jUeQRI5wPN/L0fHjH9qp
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-
Loads dropped DLL
-