General
-
Target
clock_in.msi
-
Size
720KB
-
Sample
221205-x39xyaha58
-
MD5
67d8f0f4203f74c7dc9c3ea8a00ab6b8
-
SHA1
ca6fd6caed882f183bc25963c4ea7f11923d7680
-
SHA256
de81ef356acc2e199252f8fe2a894c36c6e327d5efd3abaaa7df477f3942e33b
-
SHA512
3b71d35bd608d6f1b970faeb641b9347dd48f686295b18ffac96f121c227c203527892ef298705687a9084bd2aca2171b23d52316c337891a63ef00e85c1b366
-
SSDEEP
12288:QwHL0D7lkCPumy9chfA+tl8B0igC+/NHBh1SMHs:lHL01/zyt+b8BtZKBzSE
Static task
static1
Behavioral task
behavioral1
Sample
clock_in.msi
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
clock_in.msi
Resource
win10v2004-20221111-en
Malware Config
Extracted
icedid
787509923
kamintrewftor.com
Targets
-
-
Target
clock_in.msi
-
Size
720KB
-
MD5
67d8f0f4203f74c7dc9c3ea8a00ab6b8
-
SHA1
ca6fd6caed882f183bc25963c4ea7f11923d7680
-
SHA256
de81ef356acc2e199252f8fe2a894c36c6e327d5efd3abaaa7df477f3942e33b
-
SHA512
3b71d35bd608d6f1b970faeb641b9347dd48f686295b18ffac96f121c227c203527892ef298705687a9084bd2aca2171b23d52316c337891a63ef00e85c1b366
-
SSDEEP
12288:QwHL0D7lkCPumy9chfA+tl8B0igC+/NHBh1SMHs:lHL01/zyt+b8BtZKBzSE
-
Blocklisted process makes network request
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-