Overview

overview

10

Static

static

44270.6434...at.dll

windows7_x64

10

44270.6434...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44270.6434164352.dat.dll

  • Size

    43KB

  • Sample

    210315-qs1fhqgz2n

  • MD5

    db304a89b4c4326d87d5b01006472cf1

  • SHA1

    e65c5824445c1ce965557cce09b078520079be7e

  • SHA256

    b43bee0dc6a00c2db325b2c0a7efaefd97b9d9af4d872c02ec1953d18296e021

  • SHA512

    6ea5f449b9162bbe4b5a84ea6947375a429403f037e71afbba4c3529bcd56e59b6b40bbdaf85ba5c63f26383ed4fa22a77e6128feb2dff29f7262210e1106606

Score
10/10
icedid2811148672bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2811148672

C2

asforthemines99.uno

Targets

    • Target

      44270.6434164352.dat.dll

    • Size

      43KB

    • MD5

      db304a89b4c4326d87d5b01006472cf1

    • SHA1

      e65c5824445c1ce965557cce09b078520079be7e

    • SHA256

      b43bee0dc6a00c2db325b2c0a7efaefd97b9d9af4d872c02ec1953d18296e021

    • SHA512

      6ea5f449b9162bbe4b5a84ea6947375a429403f037e71afbba4c3529bcd56e59b6b40bbdaf85ba5c63f26383ed4fa22a77e6128feb2dff29f7262210e1106606

    Score
    10/10
    icedid2811148672bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks