icedid | aa8138d2fd97003e534e36c9961e1a105b13ea24ccf7db1059ea4026b28b5247

Analysis

max time kernel
150s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
14/07/2023, 07:38

Target
Inv_LCC_Scan_6.exe
Size 894KB
Sample230714-jgdeyscf66
SHA256 aa8138d2fd97003e534e36c9961e1a105b13ea24ccf7db1059ea4026b28b5247
MD5 9b59edc328527f3bc75aa9a718b8bd98
SHA1 4bee193f18bacb3eb4bd949e1c4b95fb95b6176d
SHA512 a632eaadc144a6918de336e33c990ec98c828d6c0623b278875758dabaee6bdbe36169fb1343e4aaae86fbe6583e0c4150d5d8765efe8d13563fe3f8b73a9609
SSDEEP 24576:07PF2l87S1xfUPu+QJ1b5xV3mo7ZTP5U6z:07P2MerdNNrz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Campaign

IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
trojan banker icedid

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
664	Inv_LCC_Scan_6.exe
664	Inv_LCC_Scan_6.exe

C:\Users\Admin\AppData\Local\Temp\Inv_LCC_Scan_6.exe
"C:\Users\Admin\AppData\Local\Temp\Inv_LCC_Scan_6.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:664

memory/664-133-0x0000026B2E440000-0x0000026B2E49B000-memory.dmp

Download

memory/664-134-0x0000026B2E210000-0x0000026B2E218000-memory.dmp

Download