Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 19:42
General
-
Target
planet64.dll
-
Size
595KB
-
MD5
c4a6cc66cad9a955f6fbd6ff6ec7f804
-
SHA1
c06164863328cc0628b5fef8f41f3971244e4d49
-
SHA256
5537366f1715dd509a927e3a0e7b37b51ca1ed289c81da7d6cf2c21f8ad50b7d
-
SHA512
66d6adc87d097c509a4f71bc71247b7e42fa0ad6ae3e9df9325ee97d3de79048e41f248b8c2a288dbf9bc70f066529a0542031eb5d52bdf320c3cda713d34867
-
SSDEEP
6144:0chMqY+yya01Gks7/bRWTU2dA9AXu9b1ohrnlFV+I9b/AnK3+QKStcGV/:EX+ylbpJ2dAAu9poOa+ut
Score
10/10
Malware Config
Extracted
Family
icedid
Botnet
3415411565
C2
antnosience.com
seaskysafe.com
Attributes
-
auth_var
1
-
url_path
/news/
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\planet64.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
-
Filesize
20KB