Overview

overview

10

Static

static

WIN7(10)

windows7_x64

10

Resubmissions

12-03-2021 16:51

210312-yt23wwh8we 10

12-03-2021 13:24

210312-4zly1ftv62 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zfbfg.ere.dll

  • Size

    156KB

  • Sample

    210312-yt23wwh8we

  • MD5

    6dafdbbcce799f332033b3498aebb8d6

  • SHA1

    a09e3c1b36e0c543d64c1417c070b011d0b6eb23

  • SHA256

    b7b6fd7461869a41bf7a4e3d8b55ddb3c2189c618f524b4780de4536bf24ab5b

  • SHA512

    39652ce06dc1110da31bbf9e80196b294fabb06bbf954f429b9c3c84fca10d0376176f465de88107dfb4a40e65844f0ddc1a9d2f3f84c8532b2ad1ea7ea2712f

Score
10/10
icedid3590845772Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3590845772

C2

emanielepolikutuo1.website

Targets

    • Target

      zfbfg.ere.dll

    • Size

      156KB

    • MD5

      6dafdbbcce799f332033b3498aebb8d6

    • SHA1

      a09e3c1b36e0c543d64c1417c070b011d0b6eb23

    • SHA256

      b7b6fd7461869a41bf7a4e3d8b55ddb3c2189c618f524b4780de4536bf24ab5b

    • SHA512

      39652ce06dc1110da31bbf9e80196b294fabb06bbf954f429b9c3c84fca10d0376176f465de88107dfb4a40e65844f0ddc1a9d2f3f84c8532b2ad1ea7ea2712f

    Score
    10/10
    icedid3590845772Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1

MITRE ATT&CK Matrix

Tasks