Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
-
submitted
02/07/2023, 19:19
General
-
Target
Malicious_0974e0d69427bc3d87061bcd0546e31f1e6fc0e71160e0fa90be2b3b9aa59784.dll
-
Size
89KB
-
MD5
4faa77e841db9c1270ea875b375191a1
-
SHA1
d010e79281255a3cd58bfa75899fd87c003d7413
-
SHA256
0974e0d69427bc3d87061bcd0546e31f1e6fc0e71160e0fa90be2b3b9aa59784
-
SHA512
6ddf6a2a6492fd909639d73972f20c87ad63009bb26c8359c0bde4af2c327cab3bd86650ffe41cfd88897a90f5c7f9803d3e8f28c4e757302779772b2df8d237
-
SSDEEP
768:RHppffnqCuZgKEq2OqmBhw9+eyA/Dj74zZ/mgxH7Wgagg1nXFJBMq/umJUZp:NDqvHEbsBneyAbniZPWznfBL/nM
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3717128962
C2
usaaforced.fun
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
IcedID First Stage Loader 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\Malicious_0974e0d69427bc3d87061bcd0546e31f1e6fc0e71160e0fa90be2b3b9aa59784.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
28KB