General
-
Target
localnet,document,09.26.2022.doc
-
Size
867KB
-
Sample
220926-wdz6rsbef3
-
MD5
29a569df42e2346c600f1d0bd404ee8d
-
SHA1
0c11fa15db83d6bc195a4e688dac30f40af6c18d
-
SHA256
461e1057fcb66e15536d92acf0da35546ecc6d9c0db677b0dfb0bc23fc2bbe88
-
SHA512
2b5bea62f71f6cc1f5ffc943586d67c6fa616582ddd919c3e586061b3d61ce4cdb3b596e46c253236099f5ab2fdbad650c18c778ee49cda1be625ebbd122d046
-
SSDEEP
12288:b4VE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DETFesyul93PE:0V2jUeQRI5wPN/AkH
Behavioral task
behavioral1
Sample
localnet,document,09.26.2022.docm
Resource
win7-20220901-en
Malware Config
Extracted
icedid
742081363
Extracted
icedid
742081363
scainznorka.com
Targets
-
-
Target
localnet,document,09.26.2022.doc
-
Size
867KB
-
MD5
29a569df42e2346c600f1d0bd404ee8d
-
SHA1
0c11fa15db83d6bc195a4e688dac30f40af6c18d
-
SHA256
461e1057fcb66e15536d92acf0da35546ecc6d9c0db677b0dfb0bc23fc2bbe88
-
SHA512
2b5bea62f71f6cc1f5ffc943586d67c6fa616582ddd919c3e586061b3d61ce4cdb3b596e46c253236099f5ab2fdbad650c18c778ee49cda1be625ebbd122d046
-
SSDEEP
12288:b4VE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DETFesyul93PE:0V2jUeQRI5wPN/AkH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-
Loads dropped DLL
-