Analysis
- max time kernel
147s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
30/12/2023, 01:51
General
- Target 0ab5551f37668cf333599dc1ba72efa8.dll
- Size 209KB
- Sample231230-b952nsecdk
- SHA256 002fc514b55c8c5878988dfe23ffe297e2b645205dc612fed955ea77254a5f79
Score
10/10
Malware Config
Extracted
Family
-
icedid
Campaign
-
4042353762
C2
-
momenturede.fun
Signatures
- IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
- IcedID First Stage Loader 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\0ab5551f37668cf333599dc1ba72efa8.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2744-0-0x0000000002DD0000-0x0000000002DD7000-memory.dmp
memory/2744-1-0x0000000002DD0000-0x0000000002DD7000-memory.dmp