Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
-
submitted
31-07-2024 10:59
General
-
Target
55d03f9954e35d8bce3fbd084d909744b3719310bac7c359cda87e7831cc1344.dll
-
Size
231KB
-
MD5
ee28a178e3aacfa1398ca74a9bc1822e
-
SHA1
193bc249bac79c0a195e736c62de5ec16e5ef38d
-
SHA256
55d03f9954e35d8bce3fbd084d909744b3719310bac7c359cda87e7831cc1344
-
SHA512
3f0dbbbda0cba4a32fe49fd7941d3fa640a8b7aeec56a3f584d519593de68e4acf8036c651cd469e386a32c5465521035dccebb6f3732f7893be552803d48353
-
SSDEEP
3072:ktkuGh43+xNkZ4I0+NFS1I74Y61cyJDz/+6BjbkJuWg349uoZaOG/mf3vfUgrfQj:FMZ4P+NEc4zYgV9QFhP0grf0dd
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
1677747888
C2
jeliskvosh.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\55d03f9954e35d8bce3fbd084d909744b3719310bac7c359cda87e7831cc1344.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
396KB