temp[.]zip | Triage

Submit
Reports

Overview

overview

Static

static

ohnemacb.dll

windows7-x64

ohnemacb.dll

windows10-2004-x64

run.bat

windows7-x64

run.bat

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

ohnemacb.dll

Resource

win7-20220812-en

icedid 447191612 banker core_loader trojan

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

ohnemacb.dll

Resource

win10v2004-20221111-en

icedid 447191612 banker core_loader trojan

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

run.bat

Resource

win7-20221111-en

icedid 447191612 banker core_loader trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

run.bat

Resource

win10v2004-20220901-en

icedid 447191612 banker core_loader trojan

windows10-2004-x64

2 signatures

150 seconds

General

Target

temp.zip
Size

378KB
MD5

8e0040f56715712d5a2788436f56f488
SHA1

70ec44bacd78c772b1ebc404d95601d0240c7af2
SHA256

7ea97ff2780d9a736998efa6590e7daddf4561c4e1920143404971da426b1956
SHA512

05632bf807b28d6fe5b615f590f09dc0e7ac855c644ac1ccaa1a5caba0b9aa515f9a6fa1e7e9e900a51329081ac27462dd437ac441f48d2d3fef544fd4bb7534
SSDEEP

6144:L3BCE43ZgJlpDDPwUlPdig/Qc0s4drkAtz7yoohRFMwIXzBCUz7MUQ8P:Lx9rJlqEb/70t33obWwwzBCUz7WY

Score

N/A

Malware Config

Signatures

Files

temp.zip
.zip
license.dat
ohnemacb.dll
.dll windows x64

5667ffdf64dcb2a0772dd5d405ef5365

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

GetSecurityDescriptorLength

gdi32

GetPolyFillMode
CreateBitmapIndirect
GetTextExtentPointW

shlwapi

ChrCmpIW

user32

WaitForInputIdle
LookupIconIdFromDirectoryEx

kernel32

GetNamedPipeServerProcessId
GetConsoleFontSize
GetThreadLocale
GetFileInformationByHandle
IsProcessInJob
DeleteTimerQueue
TerminateJobObject

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
run.bat

© 2018-2024

Terms | Privacy