General

  • Target

    Oqefuw2.dll

  • Size

    174KB

  • Sample

    201207-1n65ewg9a2

  • MD5

    6a9a7e10759fb9054f49539900090eec

  • SHA1

    3110c642c8337c1ce988c1d1d82fe52320679a7b

  • SHA256

    13ad7de7f561825af82ab9ba920f82b72908ce9aacb944dc0c6a7b1875327e5d

  • SHA512

    46bbfdfe0824a6ffda404fc9c0b2d7ba9a26e3246f2ecaa172dfec10b5cce2e29e4198415dca0b23d015381b9da29fa1dfa418b0beaa0ae4b46b19f6420dec4c

Score
10/10

Malware Config

Targets

    • Target

      Oqefuw2.dll

    • Size

      174KB

    • MD5

      6a9a7e10759fb9054f49539900090eec

    • SHA1

      3110c642c8337c1ce988c1d1d82fe52320679a7b

    • SHA256

      13ad7de7f561825af82ab9ba920f82b72908ce9aacb944dc0c6a7b1875327e5d

    • SHA512

      46bbfdfe0824a6ffda404fc9c0b2d7ba9a26e3246f2ecaa172dfec10b5cce2e29e4198415dca0b23d015381b9da29fa1dfa418b0beaa0ae4b46b19f6420dec4c

    Score
    10/10
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Core Payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks