Overview

overview

10

Static

static

fd031b9e12...57.dll

windows7_x64

10

fd031b9e12...57.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd031b9e1284a4db4c6560eb32b96757.zip

  • Size

    27KB

  • Sample

    210316-hlhet7kbbe

  • MD5

    93e335602dff7ca9d5b688acc3230b8c

  • SHA1

    928148aeb22be860e521cb0cfd88afccaa0fadac

  • SHA256

    e31bbdbf6736fecd2baed858ad29d1825df9cd8596108e294434c109e90df5c2

  • SHA512

    8f2902e4cd080b86d468e18cf19a37ee0f6c2f738fdbba92bb6f7fe153f6ada4f2f6bbb77f16439594ee8655d6079570c5f8538c073bb1d0e286a22157509e5f

Score
10/10
icedid2811148672bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2811148672

C2

asforthemines99.uno

Targets

    • Target

      fd031b9e1284a4db4c6560eb32b96757

    • Size

      43KB

    • MD5

      fd031b9e1284a4db4c6560eb32b96757

    • SHA1

      9894e331c847f2846378803dead87acca208e0bf

    • SHA256

      880b1f7eb8a82756bf980a3c94d6a81832ab0c5b1b23cdc0d907bd7ef9909f67

    • SHA512

      5d4d253919b2b52a67e714442050399a85a7fc270ff5daf729bbef04d38023c6142bf378e81b8e2ace88e02b72d919531b303320ad4be596b6dec44834aba9d4

    Score
    10/10
    icedid2811148672bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks