General

  • Target

    ~370531.dll

  • Size

    184KB

  • Sample

    201118-d2gq6zjvps

  • MD5

    8ce080d4d3f62e18b7a837d24f1c16ae

  • SHA1

    a59746c16223fa4524d78e32ebe9f50e11e7382d

  • SHA256

    a9f651747ef040972d25a7f039a4853c9ed151ad252380e1e75af32ddc4ece82

  • SHA512

    bce2c790ceca4eb96d7f55e11265fba3386fd3d2c0a8b2ed571993bef993542c1eb5fa0ada14fb76555b570cab67932dfc822be8c10a21bc6faa820411ce22a1

Score
10/10

Malware Config

Targets

    • Target

      ~370531.dll

    • Size

      184KB

    • MD5

      8ce080d4d3f62e18b7a837d24f1c16ae

    • SHA1

      a59746c16223fa4524d78e32ebe9f50e11e7382d

    • SHA256

      a9f651747ef040972d25a7f039a4853c9ed151ad252380e1e75af32ddc4ece82

    • SHA512

      bce2c790ceca4eb96d7f55e11265fba3386fd3d2c0a8b2ed571993bef993542c1eb5fa0ada14fb76555b570cab67932dfc822be8c10a21bc6faa820411ce22a1

    Score
    10/10
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Core Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks