Overview

overview

10

Static

static

dat.dll

windows7_x64

10

dat.dll

windows10_x64

10

Resubmissions

18-03-2021 17:01

210318-k3gnd1nhbn 10

18-03-2021 12:12

210318-twskzb77t2 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dat.dll

  • Size

    75KB

  • Sample

    210318-k3gnd1nhbn

  • MD5

    a32a3b34436fc8dce9e1ab2f61cce1c9

  • SHA1

    885587946e3100cf1373945e220833ef2ea44ad6

  • SHA256

    14d40d257cad5f53c23cee35c9638abc0f8abaee5b2a21a6bee81a38a3f2662c

  • SHA512

    e0129122e4713c01e621f8f3ad354438e43a869e8390c340767b7a3766532a7781f587a58c5b538adfda75da3f0e194d6aef491ad13b8077634ddf72cfdefd68

Score
10/10
icedid4213125251Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

4213125251

C2

188criolaserz.space

Targets

    • Target

      dat.dll

    • Size

      75KB

    • MD5

      a32a3b34436fc8dce9e1ab2f61cce1c9

    • SHA1

      885587946e3100cf1373945e220833ef2ea44ad6

    • SHA256

      14d40d257cad5f53c23cee35c9638abc0f8abaee5b2a21a6bee81a38a3f2662c

    • SHA512

      e0129122e4713c01e621f8f3ad354438e43a869e8390c340767b7a3766532a7781f587a58c5b538adfda75da3f0e194d6aef491ad13b8077634ddf72cfdefd68

    Score
    10/10
    icedid4213125251Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks