Overview

overview

10

Static

static

030e5a3657...22.dll

windows7_x64

10

030e5a3657...22.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    030e5a36570fb896b3e7b214784c0daa4f60bc60dd05540870ce1331aea2ef22

  • Size

    52KB

  • Sample

    210324-lgtqa3v2xn

  • MD5

    2139be25c94953899a281828f4782659

  • SHA1

    07c032e6e8734dd14586b38542c1423ec6880221

  • SHA256

    030e5a36570fb896b3e7b214784c0daa4f60bc60dd05540870ce1331aea2ef22

  • SHA512

    cc7394914d99e852569e849b6793b55c1e2976c57495c9181ebd38b7ae163ebd90721696e7cb67317bc4e405d1367d3a14f0fa430ea308d9206f7c892d9608ff

Score
10/10
icedid1211238709bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      030e5a36570fb896b3e7b214784c0daa4f60bc60dd05540870ce1331aea2ef22

    • Size

      52KB

    • MD5

      2139be25c94953899a281828f4782659

    • SHA1

      07c032e6e8734dd14586b38542c1423ec6880221

    • SHA256

      030e5a36570fb896b3e7b214784c0daa4f60bc60dd05540870ce1331aea2ef22

    • SHA512

      cc7394914d99e852569e849b6793b55c1e2976c57495c9181ebd38b7ae163ebd90721696e7cb67317bc4e405d1367d3a14f0fa430ea308d9206f7c892d9608ff

    Score
    10/10
    icedid1211238709bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks