Overview

overview

10

Static

static

5f44852cc9...25.dll

windows7_x64

10

5f44852cc9...25.dll

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f44852cc99bf4028874ec5ac49f02a89b9f66ed2a85c4c834b9c4705d0da325

  • Size

    292KB

  • Sample

    201113-vafe7q4w6e

  • MD5

    7d7b6cd4acba69cdc6c09b9ab7a4b011

  • SHA1

    0c637be56edf93af5951b361f55c444bc54cd158

  • SHA256

    5f44852cc99bf4028874ec5ac49f02a89b9f66ed2a85c4c834b9c4705d0da325

  • SHA512

    22d4668f0000649f7b13e8343b79eed9fa5d34080e0ab88941d1984edb70fc391fbd9504ee89f6f064bb8b031473e7c18db565e953dc98e85ccabf27e11c374f

Score
10/10
icedidbankertrojan

Malware Config

Targets

    • Target

      5f44852cc99bf4028874ec5ac49f02a89b9f66ed2a85c4c834b9c4705d0da325

    • Size

      292KB

    • MD5

      7d7b6cd4acba69cdc6c09b9ab7a4b011

    • SHA1

      0c637be56edf93af5951b361f55c444bc54cd158

    • SHA256

      5f44852cc99bf4028874ec5ac49f02a89b9f66ed2a85c4c834b9c4705d0da325

    • SHA512

      22d4668f0000649f7b13e8343b79eed9fa5d34080e0ab88941d1984edb70fc391fbd9504ee89f6f064bb8b031473e7c18db565e953dc98e85ccabf27e11c374f

    Score
    10/10
    icedidbankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Core Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks