Analysis
-
max time kernel
150s -
max time network
97s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
26-03-2023 01:58
Static task
static1
Behavioral task
behavioral1
Sample
1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885.exe
Resource
win10v2004-20230220-en
General
-
Target
1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885.exe
-
Size
620KB
-
MD5
d659e03354a9657001d5136308449d5c
-
SHA1
0f440e15ab54adf7f699d980fd436b3e5f03e20e
-
SHA256
1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885
-
SHA512
6c41c6beba2384538585cb5dbd495847a32cf944cbc43c017f4c47b9cb92dbab7e485df7f73f2288bbd4cf9d1d5f01b396e613ebf3fb17198fabc34e48c3e86c
-
SSDEEP
6144:vvJefQe21l/7o+zmG6abwLPcwUSgm1IWAH1c9/MJOBlX4Bd3uyWFACWPgkqTXzm6:vRloG6abwLPVRaqLm3VdGPEBj/eZb
Malware Config
Extracted
icedid
1883783121
liguspotforsit.com
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885.exepid process 832 1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885.exe 832 1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885.exe