Overview

overview

10

Static

static

Betweenwhere.dat.dll

windows7_x64

10

Betweenwhere.dat.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Betweenwhere.dat

  • Size

    192KB

  • Sample

    201207-nan56fepw2

  • MD5

    2bdd2d1c6ed7d949cb03914f3c265f17

  • SHA1

    51176cc43d7d733a0a13ac5072b7283f308bb4af

  • SHA256

    39238c2728a4f6af81b57e38456aa1f9efc8c19ad0e8fbd2f3bad803dd1b75e1

  • SHA512

    8d9076795747f39b66dcaff1bee0cc466b24edc93a3e1f426f80ccd615a96afc45b5eb4815b28d19f89115382a63eba71cdc37e590575115f6c940ee631655c1

Score
10/10
icedidbankertrojan

Malware Config

Targets

    • Target

      Betweenwhere.dat

    • Size

      192KB

    • MD5

      2bdd2d1c6ed7d949cb03914f3c265f17

    • SHA1

      51176cc43d7d733a0a13ac5072b7283f308bb4af

    • SHA256

      39238c2728a4f6af81b57e38456aa1f9efc8c19ad0e8fbd2f3bad803dd1b75e1

    • SHA512

      8d9076795747f39b66dcaff1bee0cc466b24edc93a3e1f426f80ccd615a96afc45b5eb4815b28d19f89115382a63eba71cdc37e590575115f6c940ee631655c1

    Score
    10/10
    icedidbankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Core Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks