Overview

overview

10

Static

static

Shadow

windows7_x64

10

Resubmissions

17-03-2021 13:32

210317-se8524k21x 10

16-03-2021 11:54

210316-8z3tfq1dx6 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    summer.dll

  • Size

    43KB

  • Sample

    210317-se8524k21x

  • MD5

    0c72ab9a9056aa37eaca9d0be5ee30cf

  • SHA1

    061fe160f7b96da8f01b245425a56a9792605ed6

  • SHA256

    b3791ea2bce069a6a17d518c6b62e08273a0f7bcdc023536a71af7210722cccc

  • SHA512

    3262e3d43bcec777447b822fc57a202b6b10818b7d2b7c7d75ea6ab900cf8ef9733b09d6fe9fe9e206aa8a371b35cd4d480d84dce072a058dedb71f01de85730

Score
10/10
icedid3557290534Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3557290534

C2

33nachoscocso.website

Targets

    • Target

      summer.dll

    • Size

      43KB

    • MD5

      0c72ab9a9056aa37eaca9d0be5ee30cf

    • SHA1

      061fe160f7b96da8f01b245425a56a9792605ed6

    • SHA256

      b3791ea2bce069a6a17d518c6b62e08273a0f7bcdc023536a71af7210722cccc

    • SHA512

      3262e3d43bcec777447b822fc57a202b6b10818b7d2b7c7d75ea6ab900cf8ef9733b09d6fe9fe9e206aa8a371b35cd4d480d84dce072a058dedb71f01de85730

    Score
    10/10
    icedid3557290534Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1

MITRE ATT&CK Matrix

Tasks