Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
14-05-2023 09:58
General
-
Target
045bf7ea6ea419f43ef8cba44dffb9727e205f1b983f418acc655e66b2de8c1d.exe
-
Size
606KB
-
MD5
1390522ffab99c828865258eb7a6aa8c
-
SHA1
cc2da386b0bca123c7fe5b7568ca69644ffaf947
-
SHA256
045bf7ea6ea419f43ef8cba44dffb9727e205f1b983f418acc655e66b2de8c1d
-
SHA512
0dfd1403bf1ac506ceac717c1051375687dd9730c77889e118583160a4168e7a24437109c59a356c961ff4098a1c5a92f1d1add8ab309b30621cae6e3a5119cb
-
SSDEEP
12288:ylOUH52LLvBH1f4SZ/USfXPiu1+3JxMnsBzXT80ZqC:ylOUH52LdH1gSlUsp+3XMuv8
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
997059431
C2
gintoonafa.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\045bf7ea6ea419f43ef8cba44dffb9727e205f1b983f418acc655e66b2de8c1d.exe"C:\Users\Admin\AppData\Local\Temp\045bf7ea6ea419f43ef8cba44dffb9727e205f1b983f418acc655e66b2de8c1d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
212KB