Analysis
-
max time kernel
134s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
28-09-2022 14:16
Static task
static1
Behavioral task
behavioral1
Sample
d2d9927030184c9687c6958a1daa42c6.dll
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
d2d9927030184c9687c6958a1daa42c6.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
d2d9927030184c9687c6958a1daa42c6.dll
-
Size
452KB
-
MD5
d2d9927030184c9687c6958a1daa42c6
-
SHA1
440ec63e6f46f4af154d3fb6043ea89fd7b29686
-
SHA256
ffa53c1a362be33f264c6149c323fa8b1cd6ace7f912f4080d7f290abb785c54
-
SHA512
48be1441bd9745af16b06a835653c70a953cbd03c8aec8d00c70d5a84bc2c1612c5745e2f56a6ee930c9c0c4a4579c123c2b9c182b999d578362202c473f3f10
-
SSDEEP
3072:XDJOuzQiAIOvJ+1rzyp5cq1LGKFKHrt9F5p3BZiZqBAJLMok3n+CBrMrRZm1xAyE:TJOuZrzyp5V1LGKiBBMSkLTc+yyZmAJ
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
2349072319
C2
sebdgoldingor.com
Signatures
-
Blocklisted process makes network request 3 IoCs
Processes:
rundll32.exeflow pid process 2 1100 rundll32.exe 4 1100 rundll32.exe 5 1100 rundll32.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
rundll32.exepid process 1100 rundll32.exe 1100 rundll32.exe