Overview

overview

10

Static

static

baf9463809...c8.dll

windows7_x64

10

baf9463809...c8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    baf946380919094e27db4d7052df02ea38846937f45b75a153cc2be4d6ba7ac8

  • Size

    79KB

  • Sample

    210324-tl4sjywx2e

  • MD5

    81c445deb337bba571f0a37cb753ae75

  • SHA1

    6c48fe2cd2dadb3c86aaf3de0d01f7f1a5169df8

  • SHA256

    baf946380919094e27db4d7052df02ea38846937f45b75a153cc2be4d6ba7ac8

  • SHA512

    9d344127e8b50095064978e07f603df44469b76dc301db45c6cbdb77a85f37b17389cdfea020475048fda1d425b57054ec6cd06d57a90d4c57d4de235aab5130

Score
10/10
icedid1211238709bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      baf946380919094e27db4d7052df02ea38846937f45b75a153cc2be4d6ba7ac8

    • Size

      79KB

    • MD5

      81c445deb337bba571f0a37cb753ae75

    • SHA1

      6c48fe2cd2dadb3c86aaf3de0d01f7f1a5169df8

    • SHA256

      baf946380919094e27db4d7052df02ea38846937f45b75a153cc2be4d6ba7ac8

    • SHA512

      9d344127e8b50095064978e07f603df44469b76dc301db45c6cbdb77a85f37b17389cdfea020475048fda1d425b57054ec6cd06d57a90d4c57d4de235aab5130

    Score
    10/10
    icedid1211238709bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks