Analysis
- max time kernel
152s - max time network
166s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
10/10/2023, 22:18
General
- Target 2cf9bef62939a9b645d43d05959e181f3962e7f10c9e4d73288c7f36af7d5ec2.exe
- Size 447KB
- Sample231010-18axksfa31
- SHA256 2cf9bef62939a9b645d43d05959e181f3962e7f10c9e4d73288c7f36af7d5ec2
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
1561373935
C2
-
filtaferamoza.com
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2cf9bef62939a9b645d43d05959e181f3962e7f10c9e4d73288c7f36af7d5ec2.exe"C:\Users\Admin\AppData\Local\Temp\2cf9bef62939a9b645d43d05959e181f3962e7f10c9e4d73288c7f36af7d5ec2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1468-0-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1468-1-0x00000000001F0000-0x00000000001F4000-memory.dmp
memory/1468-2-0x0000000000680000-0x0000000000688000-memory.dmp
memory/1468-9-0x0000000000400000-0x0000000000475000-memory.dmp