Overview

overview

10

Static

static

Arutxesb3.dll

windows7_x64

10

Arutxesb3.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Arutxesb3.dll

  • Size

    432KB

  • Sample

    201210-gpqfc5hk1x

  • MD5

    c90f7887975937351782122deac2ba2f

  • SHA1

    540a89a98a26c9b42418839f8aea57aaa74ce79f

  • SHA256

    31d8a3551ab27eb493d57b851f406952d7287dee0b2072270427dc5f797dac51

  • SHA512

    fde95a7c41cc66bc56847e7548851e84417fe119389539e14b1c1665840c680244b8b72282e4c3de0a77a73f4701c92d377c8d1b979d2803aca20487ee345976

Score
10/10
icedidbankertrojan

Malware Config

Targets

    • Target

      Arutxesb3.dll

    • Size

      432KB

    • MD5

      c90f7887975937351782122deac2ba2f

    • SHA1

      540a89a98a26c9b42418839f8aea57aaa74ce79f

    • SHA256

      31d8a3551ab27eb493d57b851f406952d7287dee0b2072270427dc5f797dac51

    • SHA512

      fde95a7c41cc66bc56847e7548851e84417fe119389539e14b1c1665840c680244b8b72282e4c3de0a77a73f4701c92d377c8d1b979d2803aca20487ee345976

    Score
    10/10
    icedidbankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Core Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks