Analysis
- max time kernel
148s - max time network
151s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
27/12/2023, 03:54
General
- Target a25896d1cb9f9bc9297c670401b66d07.exe
- Size 275KB
- Sample231227-egaxlsbch8
- SHA256 71875ee84f1bb1f619725eec1f436194119b0f346c8e59f97747f790632fc5d3
Score
10/10
Malware Config
Extracted
Family
-
icedid
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- IcedID Second Stage Loader 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a25896d1cb9f9bc9297c670401b66d07.exe"C:\Users\Admin\AppData\Local\Temp\a25896d1cb9f9bc9297c670401b66d07.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1732-0-0x0000000000C20000-0x0000000000D5B000-memory.dmp
memory/1732-1-0x0000000000140000-0x0000000000141000-memory.dmp