Analysis
- max time kernel
151s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
25/07/2023, 07:27
General
- Target INV-Details-JUL2023(179).exe
- Size 447KB
- Sample230725-h94beabd48
- SHA256 a07a7e40ff88008ef3a3150aa45733e2ca380508c1165ec75fc2bf52cc9a9d3c
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
1561373935
C2
-
filtaferamoza.com
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\INV-Details-JUL2023(179).exe"C:\Users\Admin\AppData\Local\Temp\INV-Details-JUL2023(179).exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3336-133-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3336-134-0x00000000001E0000-0x00000000001E4000-memory.dmp
memory/3336-135-0x00000000001F0000-0x00000000001F8000-memory.dmp
memory/3336-142-0x0000000000400000-0x0000000000475000-memory.dmp