Analysis
-
max time kernel
125s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
11-12-2022 23:03
Behavioral task
behavioral1
Sample
533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30.dll
Resource
win7-20221111-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30.dll
-
Size
13KB
-
MD5
c9868fc23a7d334c67d737edcfe9fcc5
-
SHA1
fa3cc12178641cb083f824a3b4964c9c96aa3d98
-
SHA256
533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30
-
SHA512
2ce774f576dcd78587a893820f4d19aa92334b4d4c7fb0caf8f3c1c8c6f5542535ae6e6d7def7cf1a685f551c2d80d7521633166e950ecdbdacb22ef775a7337
-
SSDEEP
384:J5Jxayczq7Yjt9lfle9s6PLtB4c6kYGi8:J5DHYeIlfle9HDt2Si
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
1441853872
Signatures
-
Blocklisted process makes network request 3 IoCs
Processes:
rundll32.exeflow pid process 2 1316 rundll32.exe 4 1316 rundll32.exe 5 1316 rundll32.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
rundll32.exepid process 1316 rundll32.exe 1316 rundll32.exe