Overview

overview

10

Static

static

44279.8979...at.dll

windows7_x64

10

44279.8979...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44279.8979498843.dat

  • Size

    52KB

  • Sample

    210324-szqlnds3as

  • MD5

    17ea2a3179dc8fd4fa377f302c24f3ef

  • SHA1

    7bcbb24f4b079beb72a8dc3fa7cb031742575891

  • SHA256

    17b9da9f2cadfc5c4ec0e3042f1423662b7e9e767e4bddb839575054177a8a3c

  • SHA512

    0b6f508aaf8cfc8d27317902b8319092b5a891dbafdd86daa60210bf0176b9de74d3cef7e36f5770caad6ffaccbecfcd4668e23633ba08865b648cf9eff573da

Score
10/10
icedid1211238709bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      44279.8979498843.dat

    • Size

      52KB

    • MD5

      17ea2a3179dc8fd4fa377f302c24f3ef

    • SHA1

      7bcbb24f4b079beb72a8dc3fa7cb031742575891

    • SHA256

      17b9da9f2cadfc5c4ec0e3042f1423662b7e9e767e4bddb839575054177a8a3c

    • SHA512

      0b6f508aaf8cfc8d27317902b8319092b5a891dbafdd86daa60210bf0176b9de74d3cef7e36f5770caad6ffaccbecfcd4668e23633ba08865b648cf9eff573da

    Score
    10/10
    icedid1211238709bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks