Overview

overview

10

Static

static

2e8da44e77...b6.dll

windows7_x64

10

2e8da44e77...b6.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e8da44e777efbaa836fc35d8248f1b6.dll

  • Size

    79KB

  • Sample

    210324-tf2xvsab4a

  • MD5

    2e8da44e777efbaa836fc35d8248f1b6

  • SHA1

    8ac9f772a971ba326251e78d263706f6a1b61e5d

  • SHA256

    5229a58333afad0a721e1ae21582fddbf3a346bd3d43bdef68ff9c401a8f319f

  • SHA512

    8a66ec6acee3a98298040d9f118f42df884aaa6aedae9f4f6309ad26026e2579d5494d2d8ff09d38ed322768ae5984ea8b25a4b404bd507729a2834812503a12

Score
10/10
icedid1211238709bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      2e8da44e777efbaa836fc35d8248f1b6.dll

    • Size

      79KB

    • MD5

      2e8da44e777efbaa836fc35d8248f1b6

    • SHA1

      8ac9f772a971ba326251e78d263706f6a1b61e5d

    • SHA256

      5229a58333afad0a721e1ae21582fddbf3a346bd3d43bdef68ff9c401a8f319f

    • SHA512

      8a66ec6acee3a98298040d9f118f42df884aaa6aedae9f4f6309ad26026e2579d5494d2d8ff09d38ed322768ae5984ea8b25a4b404bd507729a2834812503a12

    Score
    10/10
    icedid1211238709bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks