Overview

overview

10

Static

static

925355f1fa...38.dll

windows7_x64

10

925355f1fa...38.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    925355f1fa8192f98db0f73bb7b15a38.dll

  • Size

    79KB

  • Sample

    210324-sadkwvwsex

  • MD5

    925355f1fa8192f98db0f73bb7b15a38

  • SHA1

    d0f1624b2ebe851a0966aeff2d0fb32dafd66605

  • SHA256

    503c3fc75984b23df59f3e53416764f2392bc76b16cb73bba7027fe86914888d

  • SHA512

    4961c2f054eaa0d0d53ab71eb370e76a4505d541cea0077c0c8546a32198d6ed5dbd431f1722bc21a899ddfbe828d54d70a71b7e99d8a9cca019214565bd8d03

Score
10/10
icedid1211238709bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      925355f1fa8192f98db0f73bb7b15a38.dll

    • Size

      79KB

    • MD5

      925355f1fa8192f98db0f73bb7b15a38

    • SHA1

      d0f1624b2ebe851a0966aeff2d0fb32dafd66605

    • SHA256

      503c3fc75984b23df59f3e53416764f2392bc76b16cb73bba7027fe86914888d

    • SHA512

      4961c2f054eaa0d0d53ab71eb370e76a4505d541cea0077c0c8546a32198d6ed5dbd431f1722bc21a899ddfbe828d54d70a71b7e99d8a9cca019214565bd8d03

    Score
    10/10
    icedid1211238709bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks