Analysis
-
max time kernel
189s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
29-02-2024 09:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fbbecb1d0c70fc6aa7e265a6fd16cb387046ee19c12f72506ddb5fc13c45a6d0.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
General
-
Target
fbbecb1d0c70fc6aa7e265a6fd16cb387046ee19c12f72506ddb5fc13c45a6d0.exe
-
Size
228KB
-
MD5
c912106795fd871c8a87717c15259589
-
SHA1
d83e4febff4552054966a98fdd34d0a6e27fba5f
-
SHA256
fbbecb1d0c70fc6aa7e265a6fd16cb387046ee19c12f72506ddb5fc13c45a6d0
-
SHA512
30b9de90dfb720fa9aa3147aa83895be6942a4484672adb2163b14c7ebf0575c57fcee86a019ab70d962c575fb5c8e224a2c0a3fd3820b620fe570f90fbda606
-
SSDEEP
6144:Vk7xo+8R2jV7jd0Zsb8m0ZcOqxamF4WFL:VsnV7SZsb0WOqxZrF
Malware Config
Extracted
Family
icedid
Signatures
-
IcedID Second Stage Loader 2 IoCs
Processes:
resource yara_rule behavioral2/memory/3696-0-0x0000000000480000-0x0000000000D55000-memory.dmp IcedidSecondLoader behavioral2/memory/3696-2-0x0000000000480000-0x0000000000D55000-memory.dmp IcedidSecondLoader