Analysis
- max time kernel
155s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
25/07/2023, 09:24
General
- Target INV-Details-JUL2023(124).exe
- Size 447KB
- Sample230725-lc2m4acd9t
- SHA256 595349f2bee834c22d2fce1f640d6fd089df862daafeaeb388bc2f1b79b53002
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
1561373935
C2
-
filtaferamoza.com
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\INV-Details-JUL2023(124).exe"C:\Users\Admin\AppData\Local\Temp\INV-Details-JUL2023(124).exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/932-136-0x0000000000400000-0x0000000000475000-memory.dmp
memory/932-138-0x0000000000680000-0x0000000000688000-memory.dmp
memory/932-137-0x00000000001F0000-0x00000000001F4000-memory.dmp
memory/932-145-0x0000000000400000-0x0000000000475000-memory.dmp