Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
12-11-2022 11:37
Static task
static1
Behavioral task
behavioral1
Sample
cf617e8fc95d0c040fdb7d462181d21e4f988c406c9fb1545eb270030b7e3efa.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
300 seconds
General
-
Target
cf617e8fc95d0c040fdb7d462181d21e4f988c406c9fb1545eb270030b7e3efa.dll
-
Size
377KB
-
MD5
1c39c87663d517ce9d08006167ed5cc3
-
SHA1
09fcc5bd5aed172db6e9ade461576ba2a81bf8be
-
SHA256
cf617e8fc95d0c040fdb7d462181d21e4f988c406c9fb1545eb270030b7e3efa
-
SHA512
d367aaa6f8d25941e7c7e6f9f78f20fed11c8a098e29619428a0b33998d0c5c6ee2e9bdb39d0830bb00dc8663e86c4b0a59c4b7bb128c723bb27157ce1e249b7
-
SSDEEP
6144:6mNegonFhyT43MVrbAMTJE2LrRohJF3bmNegonFhyT43MVrbAMTJE2LLRohJF:6uxonFgE38NpoHdbuxonFgE38NBoH
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
1139942657
C2
newscommercde.com
spkdeutshnewsupp.com
germanysupportspk.com
nrwmarkettoys.com
Attributes
-
auth_var
2
-
url_path
/news/
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1280-54-0x0000000000100000-0x0000000000105000-memory.dmpFilesize
20KB