Analysis
-
max time kernel
138s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
02/07/2023, 19:12
General
-
Target
Malicious_dcbefcad847bd1645f5ecd833665b8d4a03b9d26bd44382b8b74c0aa4e6f13e6.dll
-
Size
64KB
-
MD5
cc71d9565418060f330b15e4be338939
-
SHA1
69bd0dda49200a298b0ff25ad7049e293f97fe71
-
SHA256
dcbefcad847bd1645f5ecd833665b8d4a03b9d26bd44382b8b74c0aa4e6f13e6
-
SHA512
0b524563f892feda2f5cfc895360012243b40d6f8912e054dcf8a95c1fb736b680d2dc9721daa24278bbad44604dc594f017b2237ce159b400abb9060fb77abe
-
SSDEEP
1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
2046050
C2
calldivorce.fun
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
IcedID First Stage Loader 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\Malicious_dcbefcad847bd1645f5ecd833665b8d4a03b9d26bd44382b8b74c0aa4e6f13e6.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
28KB