Resubmissions
21-01-2023 19:15
230121-xyntxafc8s 1021-01-2023 19:07
230121-xsnlysfc51 1021-01-2023 18:30
230121-w5k6xsfb5v 1021-01-2023 17:52
230121-wf796adc28 1021-01-2023 17:50
230121-weml3adc24 121-01-2023 17:31
230121-v341ksfa7w 820-01-2023 15:34
230120-sz4jjagh42 1020-01-2023 14:16
230120-rlkc3agb3v 120-01-2023 14:13
230120-rjwy3sgb21 1General
-
Target
https://firebasestorage.googleapis.com/v0/b/profound-veld-372422.appspot.com/o/6ncxCfGfXG%2FPaid_Offer_83_Jan_19.zip?alt=media&token=df54093b-4acf-45a1-8c62-d1100bc5a46f
-
Sample
230120-sz4jjagh42
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://firebasestorage.googleapis.com/v0/b/profound-veld-372422.appspot.com/o/6ncxCfGfXG%2FPaid_Offer_83_Jan_19.zip?alt=media&token=df54093b-4acf-45a1-8c62-d1100bc5a46f
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
https://firebasestorage.googleapis.com/v0/b/profound-veld-372422.appspot.com/o/6ncxCfGfXG%2FPaid_Offer_83_Jan_19.zip?alt=media&token=df54093b-4acf-45a1-8c62-d1100bc5a46f
Resource
win10v2004-20221111-en
Malware Config
Extracted
icedid
3108046779
klayerziluska.com
Targets
-
-
Target
https://firebasestorage.googleapis.com/v0/b/profound-veld-372422.appspot.com/o/6ncxCfGfXG%2FPaid_Offer_83_Jan_19.zip?alt=media&token=df54093b-4acf-45a1-8c62-d1100bc5a46f
Score10/10-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-