Overview

overview

10

Static

static

globalRemove.dll

windows7_x64

10

globalRemove.dll

windows10_x64

10

Resubmissions

23-03-2021 17:50

210323-bgkvf4k84x 10

23-03-2021 14:43

210323-m9b4rh26ks 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    globalRemove.dll

  • Size

    74KB

  • Sample

    210323-bgkvf4k84x

  • MD5

    0d7337895bd6c00d9797235504b0bae6

  • SHA1

    1d45ced100abecdcb4208358de37e52fdb7de1d4

  • SHA256

    45cb789e50ac5222420b05653e25fd6af55785581d0b713b345d301a227798c5

  • SHA512

    af11064fbb30ba6bd01a65ae3de0f41be1df50e3e41758fe9c8b6a6f95babd9f3042b46196f77d515a0cc19a8da910c40a3cd5cc8d36fa98f69523e4a6149cc0

Score
10/10
icedid1144128233Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1144128233

C2

40yrjobberz.space

Targets

    • Target

      globalRemove.dll

    • Size

      74KB

    • MD5

      0d7337895bd6c00d9797235504b0bae6

    • SHA1

      1d45ced100abecdcb4208358de37e52fdb7de1d4

    • SHA256

      45cb789e50ac5222420b05653e25fd6af55785581d0b713b345d301a227798c5

    • SHA512

      af11064fbb30ba6bd01a65ae3de0f41be1df50e3e41758fe9c8b6a6f95babd9f3042b46196f77d515a0cc19a8da910c40a3cd5cc8d36fa98f69523e4a6149cc0

    Score
    10/10
    icedid1144128233Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks