Analysis
-
max time kernel
43s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
05-01-2023 14:46
General
-
Target
ebcfb23a12c1062c13efa578ad310fc44312f43ae199f926357d6cd54dabbf00.exe
-
Size
635KB
-
MD5
890c4af45ddbdff0cef9875947d0336a
-
SHA1
373d3388fccb978ac8fd281c8a39707578b05101
-
SHA256
ebcfb23a12c1062c13efa578ad310fc44312f43ae199f926357d6cd54dabbf00
-
SHA512
fec3fe07053e6d473a424f0fef8ed736732ac9a6680884a19af53733e356cca6a90c42fa169a872e744eca9890aab9474cea4f455ddbccf87d5d422e48b256bb
-
SSDEEP
6144:aJi9og6DkOhK8qcAwiHNaKL22qU3SGUG0Du40XObmzXCNih:gLhK84wiAKK2aGsT0+bmbd
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
1150969276
C2
broskabrwaf.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ebcfb23a12c1062c13efa578ad310fc44312f43ae199f926357d6cd54dabbf00.exe"C:\Users\Admin\AppData\Local\Temp\ebcfb23a12c1062c13efa578ad310fc44312f43ae199f926357d6cd54dabbf00.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
688KB
-
Filesize
688KB