Analysis
-
max time kernel
80s -
max time network
76s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21/02/2025, 11:31
General
-
Target
new_iced.exe
-
Size
142KB
-
MD5
17091a1e444f306b928d69f2b905bc8b
-
SHA1
1078744833050626e9681c7c233c3a0963a0b559
-
SHA256
76cd290b236b11bd18d81e75e41682208e4c0a5701ce7834a9e289ea9e06eb7e
-
SHA512
4a62f6a289f06b90d6ca080793cf4ae85e1adca3c2d83c66375ae6458f8ed9d58d7e57649634d7e4a722e7c1f252156883641c822590d38c70d9dbadec6fa29d
-
SSDEEP
3072:ba8SY43/m5E+dynrtyZkishPxmjQIhWv:ba5Yye5Efnx9hPxmMzv
Score
10/10
Malware Config
Extracted
Family
icedid
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
IcedID Second Stage Loader 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\new_iced.exe"C:\Users\Admin\AppData\Local\Temp\new_iced.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
12KB