Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22-12-2024 03:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
i.dll
Resource
win7-20241010-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
i.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
i.dll
-
Size
156KB
-
MD5
6dafdbbcce799f332033b3498aebb8d6
-
SHA1
a09e3c1b36e0c543d64c1417c070b011d0b6eb23
-
SHA256
b7b6fd7461869a41bf7a4e3d8b55ddb3c2189c618f524b4780de4536bf24ab5b
-
SHA512
39652ce06dc1110da31bbf9e80196b294fabb06bbf954f429b9c3c84fca10d0376176f465de88107dfb4a40e65844f0ddc1a9d2f3f84c8532b2ad1ea7ea2712f
-
SSDEEP
3072:VycQnMgTAfxzmMsMSMRtgxStChixNfpBFTK:DQIg6ChiDhBp
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3590845772
C2
emanielepolikutuo1.website
Signatures
-
Icedid family
-
IcedID First Stage Loader 2 IoCs
resource yara_rule behavioral1/memory/2876-1-0x0000000000160000-0x0000000000167000-memory.dmp IcedidFirstLoader behavioral1/memory/2876-2-0x0000000000160000-0x0000000000167000-memory.dmp IcedidFirstLoader -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2876 regsvr32.exe 2876 regsvr32.exe