Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system -
submitted
02-07-2023 19:16
Static task
static1
Behavioral task
behavioral1
Sample
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.dll
Resource
win10v2004-20230621-en
General
-
Target
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.dll
-
Size
75KB
-
MD5
98d1abb8fef28d64ebcdd3184dc6e2b1
-
SHA1
936d85a5fe28f1745b823df4c86bd0c6176bf62a
-
SHA256
b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a
-
SHA512
058d484f7683552937128c06fc91a6fcec47e61ecb79e5f2abbdbd904c52632109b4c08309f2c3be025b51f2c2bed76c697fbc12657024f59d13a724cc393cde
-
SSDEEP
1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivf:x530ysqinXU39E/3lRA
Malware Config
Extracted
icedid
4213125251
asforthemines99.uno
Signatures
-
IcedID First Stage Loader 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1736-54-0x00000000003B0000-0x00000000003B7000-memory.dmp IcedidFirstLoader behavioral1/memory/1736-55-0x00000000003B0000-0x00000000003B7000-memory.dmp IcedidFirstLoader -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
regsvr32.exepid process 1736 regsvr32.exe 1736 regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\Cab8FE3.tmpFilesize
62KB
MD53ac860860707baaf32469fa7cc7c0192
SHA1c33c2acdaba0e6fa41fd2f00f186804722477639
SHA256d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904
SHA512d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c
-
memory/1736-54-0x00000000003B0000-0x00000000003B7000-memory.dmpFilesize
28KB
-
memory/1736-55-0x00000000003B0000-0x00000000003B7000-memory.dmpFilesize
28KB