Overview

overview

10

Static

static

98529e3962...37.dll

windows7_x64

10

98529e3962...37.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98529e3962da31f2e61583794d424137.zip

  • Size

    27KB

  • Sample

    210316-g26xlxnebe

  • MD5

    ab5e2418bfb1b5faa4bcd7ada8f05321

  • SHA1

    5f718c9f49aa00e757ad1888bbfb0e3cc668ed88

  • SHA256

    c866f10216ca1b392a8d1014785c02ee54995f6180bc2b82de7726d3075379f1

  • SHA512

    00d97a0e3f8ae4c60ace22a100274c48e6c8b21e30e4e29add4681a1e2ffdde633115166cf71c3d9664260a344fe848c15991eefa4d72e8fb89be0e766fa984a

Score
10/10
icedid2811148672bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2811148672

C2

asforthemines99.uno

Targets

    • Target

      98529e3962da31f2e61583794d424137

    • Size

      43KB

    • MD5

      98529e3962da31f2e61583794d424137

    • SHA1

      54faa55e8a37fbad3e13f95d4fa7fb4af9912656

    • SHA256

      d70454becabad4e4fd17045fdb9f9a562c016be10ece3d4a18206f8ceba484c2

    • SHA512

      8f95973831e71103c367e48b6de190bd681c3a0061a86d6bd4f89dafcb633b32088004f8db9fbbf19f01b182d580940a3cb1c5885811b5a61b97f2944b135797

    Score
    10/10
    icedid2811148672bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks