General
-
Target
lycos document 09.26.2022.doc
-
Size
867KB
-
Sample
220926-ws6l4acgbn
-
MD5
2c89a93390026817e3d5e4127a73c637
-
SHA1
b44dca8d528b1dcc11a4c888f66ddb8aa90c4766
-
SHA256
bc65b9d1bdda2829ff01c3ee12803f834422ed8a209ece5c896d0c1934bd1595
-
SHA512
38e5d45747b90288c4c5711f18b4a61225b6a94515372de10fba4800af019b583ae8f6c9068582ff392c9f3e442f2a7ae7b78ef4e80c8a789c0fe854f8459745
-
SSDEEP
12288:rkVE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DE+mu5GYAH7og1ANm:rkV2jUeQRI5wPN/pmu5iEFm
Behavioral task
behavioral1
Sample
lycos document 09.26.2022.docm
Resource
win7-20220812-en
Malware Config
Extracted
icedid
742081363
Extracted
icedid
742081363
scainznorka.com
Targets
-
-
Target
lycos document 09.26.2022.doc
-
Size
867KB
-
MD5
2c89a93390026817e3d5e4127a73c637
-
SHA1
b44dca8d528b1dcc11a4c888f66ddb8aa90c4766
-
SHA256
bc65b9d1bdda2829ff01c3ee12803f834422ed8a209ece5c896d0c1934bd1595
-
SHA512
38e5d45747b90288c4c5711f18b4a61225b6a94515372de10fba4800af019b583ae8f6c9068582ff392c9f3e442f2a7ae7b78ef4e80c8a789c0fe854f8459745
-
SSDEEP
12288:rkVE9j2y+1JbeQbntrws6/GYzw6OFokpXfiiGef/DE+mu5GYAH7og1ANm:rkV2jUeQRI5wPN/pmu5iEFm
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-
Loads dropped DLL
-