Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-06-2024 00:38

General

  • Target

    2024-06-07_cf3a50a335d07601022a4aca1a2263fa_icedid.exe

  • Size

    8KB

  • MD5

    cf3a50a335d07601022a4aca1a2263fa

  • SHA1

    ff8500aa70bb09edcafeccd6ccef4591bbdb2c24

  • SHA256

    3db3341ac8691ada08f30cbde6f548599488015031dc21b6a97394bb3cb096b2

  • SHA512

    3c7359af119befc2acf6bc1101ac73e8861336860608be2d8cf779f5dfc13251a9ccfc21bc7d5d896dfe3c413ab183fbb4995e28e9fe9f718eb7a6a8bb0f1be0

  • SSDEEP

    192:/G6OThBwj6k8TqLUh5wCb3py+g2O9CtE:/G9hNxh5Zp1i9C

Score
10/10

Malware Config

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

  • Modifies system certificate store 2 TTPs 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-07_cf3a50a335d07601022a4aca1a2263fa_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-07_cf3a50a335d07601022a4aca1a2263fa_icedid.exe"
    1⤵
    • Modifies system certificate store
    PID:5104

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads