Overview

overview

10

Static

static

Runtime.brok1.dll

windows7_x64

10

Runtime.brok1.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Runtime.brok1

  • Size

    153KB

  • Sample

    210311-k6mbf6fwna

  • MD5

    97c320926eba29d86197e65c87f5b8c8

  • SHA1

    c47f7d4321a05f77a6389083df7ad71238775612

  • SHA256

    71fefd0b44412e24107cf6edea81ea0ae15ba7bcc2b7f1da99813f223eb36699

  • SHA512

    165f1bce2ecb523c689327796004f8eb68d7b21a6b8ede9355c0658c7da067b3979e40e38d7b3e25cd445d54730d96e05ea91f716e09694cf5fbb19d4a172907

Score
10/10
icedid2292720537bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2292720537

C2

awefoplou5.site

Targets

    • Target

      Runtime.brok1

    • Size

      153KB

    • MD5

      97c320926eba29d86197e65c87f5b8c8

    • SHA1

      c47f7d4321a05f77a6389083df7ad71238775612

    • SHA256

      71fefd0b44412e24107cf6edea81ea0ae15ba7bcc2b7f1da99813f223eb36699

    • SHA512

      165f1bce2ecb523c689327796004f8eb68d7b21a6b8ede9355c0658c7da067b3979e40e38d7b3e25cd445d54730d96e05ea91f716e09694cf5fbb19d4a172907

    Score
    10/10
    icedid2292720537bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks