Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-12-2024 17:37
General
-
Target
69d204fefc8e52d0ec39afaef29c24dd84d574b24731bd4065bf06050eaf39ce.dll
-
Size
490KB
-
MD5
3dc0a8cf704966775c4f759b495d2019
-
SHA1
140ddda7eaa06983c96e47ae19732ea520b6c7ce
-
SHA256
69d204fefc8e52d0ec39afaef29c24dd84d574b24731bd4065bf06050eaf39ce
-
SHA512
1e09a02c855931043f9d3bc63906a326fd541a0a115a0d9fc83f5d8d143be101d074134294703ef0e27fcce5463b987c3c5ff9a6a18d56e6da9a242b421b6a44
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRJ:knmj6xK1y3Ik6TZGRJ
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\69d204fefc8e52d0ec39afaef29c24dd84d574b24731bd4065bf06050eaf39ce.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB