Analysis
-
max time kernel
150s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
10-04-2023 12:38
Static task
static1
Behavioral task
behavioral1
Sample
009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
General
-
Target
009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df.exe
-
Size
391KB
-
MD5
d91dee9dfbdbf0b35593424723052a55
-
SHA1
813c274e68916cba601134f689788e938f7ef9e7
-
SHA256
009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df
-
SHA512
b15064ae8ae5c2c1828d0e8058e12b2655525761c4366278bdb13f82f104b573ee014f8132e5b1c6cc79bc3f9e6d6a92c76a8184bdffe9f108f9b1f74a14a448
-
SSDEEP
6144:EOUzREbq7Y9m47z+RtK87+YZSZXYSBdyvo+Rhw00C0Ul0YdxwW1Pi4QnpUk/rTwx:HUGbq0s4mR0SSZq3EuSX3wMW5vd
Malware Config
Extracted
Family
icedid
Campaign
73743838
C2
aoureskindzet.com
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df.exepid process 1432 009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df.exe 1432 009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df.exe