Overview

overview

10

Static

static

44279.8980...at.dll

windows7_x64

10

44279.8980...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44279.8980503472.dat

  • Size

    52KB

  • Sample

    210324-zjphqvd4ts

  • MD5

    e6ade2074c6695cd29f7384d1ef588e1

  • SHA1

    b09ad29d9d2d7ca4f910f7ad53efd44722245062

  • SHA256

    25fffa9735f33a907b959cf73932e3582fb45df518f3653f2c4fd6d3b5e7ff8a

  • SHA512

    a4ac52d5b7218c696274b961a08580042382f7f72ef73e6eca6d997084e4c6d70fd0aea12e44eb9d27ccd923d6b01f0bd078d27ad8218b503b9f2dbbbf1b5e93

Score
10/10
icedid1211238709bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      44279.8980503472.dat

    • Size

      52KB

    • MD5

      e6ade2074c6695cd29f7384d1ef588e1

    • SHA1

      b09ad29d9d2d7ca4f910f7ad53efd44722245062

    • SHA256

      25fffa9735f33a907b959cf73932e3582fb45df518f3653f2c4fd6d3b5e7ff8a

    • SHA512

      a4ac52d5b7218c696274b961a08580042382f7f72ef73e6eca6d997084e4c6d70fd0aea12e44eb9d27ccd923d6b01f0bd078d27ad8218b503b9f2dbbbf1b5e93

    Score
    10/10
    icedid1211238709bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks