Analysis
-
max time kernel
142s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/12/2024, 17:40
General
-
Target
f2176826c8de8d6b20bc6209442038580b70ebe47e1886ccee1a97d59f4d093a.dll
-
Size
490KB
-
MD5
471fda149c3c801f763e6041b060ac43
-
SHA1
36f6d1e73fe382c896a65cb926eb78bdfcb2982f
-
SHA256
f2176826c8de8d6b20bc6209442038580b70ebe47e1886ccee1a97d59f4d093a
-
SHA512
c7a49348e6ebcec5fc9af1df7f9176071291cd4acbb67cccf387457681572acb92cc9d7072a77f0c41829ddacf63df5e09d23596c96ba06911fa481fdbacc575
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRJ:knmj6xK1y3Ik6TZGRJ
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\f2176826c8de8d6b20bc6209442038580b70ebe47e1886ccee1a97d59f4d093a.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB