Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2024 09:22

General

  • Target

    mule-x32.dll

  • Size

    115KB

  • MD5

    5cfa729ab0d745d465e1a706ec2c00c2

  • SHA1

    6eb2e7bc1e5cf1bfb90a3733c486a6680ee69c47

  • SHA256

    7aff2c54185cf6cc1bb85807517ad18c5441c8e7e93663b79c6bc35b91142337

  • SHA512

    fd69c5e18e09e9518f7c025ead3a2930e506a6ee73fd948e1923d1b3897ada5b6c8e2d63e743d07e25d805b9df7a2d2c915794048942b1fcc1f057a97e0deabe

  • SSDEEP

    1536:ANEonq8nKHAQnjUKxMmnwng/MmEs/qTy9Cj3/2GwBpFiTXTK2EEQ:wAx//MmEs/qTy9Cj3/2GwBpFiTKyQ

Malware Config

Extracted

Family

icedid

Botnet

3026272684

C2

hashingold.top

asperuguz.store

loppidoaster.site

hisbacteriu.top

Attributes
  • auth_var

    7

  • url_path

    /posts/

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\mule-x32.dll,#1
    1⤵
      PID:2700

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2700-0-0x00000000001A0000-0x00000000001D7000-memory.dmp

      Filesize

      220KB

    • memory/2700-1-0x00000000001A0000-0x00000000001D7000-memory.dmp

      Filesize

      220KB