8387fefd3f301af8fa750628aa253276.bin
- SHA256 2154488682e7fa52945812b2e217fb68bba0bb1baafe02de905e6616f2b65c2f
Behavioral task
behavioral1
Sample
6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed.exe
Resource
win7-20230220-en
icedid
TEARDROP is a memory-only dropper which can read files/registry keys, decode an embedded payload, and load it directly into memory.
| resource | yara_rule |
|---|---|
| static1/unpack001/6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed.exe | family_teardrop |
| resource | yara_rule |
|---|---|
| static1/unpack001/6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed.exe | family_matiex |
| resource | yara_rule |
|---|---|
| static1/unpack001/6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed.exe | miner_phoenix |
Matiex Main payload
Detectes Phoenix Miner Payload