Analysis
-
max time kernel
16s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 19:23
General
-
Target
hurry-32.dll
-
Size
147KB
-
MD5
10e431edd6c392b122115b14e0e00075
-
SHA1
8f45d7ce82ea7a6e2a1835945d467f592ae2f43c
-
SHA256
3ee43f8bddfeed1db349da62db9e27260afedc8717aa999df6d24f91268200d4
-
SHA512
9f93e6267dcc00e3aa501852b5a1137e0f9cc29a62f358e57f1dd56872c5fc157ebaad5cf8c9afeb3df0b64ee459112ab2080078706181ae3ecda564f3a79e84
-
SSDEEP
3072:MOKatrezEbEhoU6bEhWfdbCUV5AiW4rbEhHizOCUHicOCUHiEOCUhUGzrNOxhfY2:MRMOi
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
3560182600
C2
coolbearblunts.com
cooldogblunts.com
Attributes
-
auth_var
2
-
url_path
/news/
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\hurry-32.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
220KB
-
Filesize
220KB