Overview

overview

10

Static

static

345538bd56...5a.dll

windows7_x64

10

345538bd56...5a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    345538bd567e16dc0408b9db3499d641b79d5dea5c15a.dll

  • Size

    198KB

  • Sample

    210401-ptt19bgw3x

  • MD5

    f34670c7cf01f5d56a2ee60d577c0365

  • SHA1

    d4084075dab888d4c8b7fc4fd34e2eff5c5029ed

  • SHA256

    345538bd567e16dc0408b9db3499d641b79d5dea5c15a14a509fb19bdb9ed019

  • SHA512

    8f51446acd46be799d4b0166e4cffec3264f347ea11feadbe5e11f808b92da834230f87a013316ea699ca5bb4cce164afffe19d36c89aaf7c6f48c7c598079ac

Score
10/10
icedid1584008337bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

secondpilots.space

Targets

    • Target

      345538bd567e16dc0408b9db3499d641b79d5dea5c15a.dll

    • Size

      198KB

    • MD5

      f34670c7cf01f5d56a2ee60d577c0365

    • SHA1

      d4084075dab888d4c8b7fc4fd34e2eff5c5029ed

    • SHA256

      345538bd567e16dc0408b9db3499d641b79d5dea5c15a14a509fb19bdb9ed019

    • SHA512

      8f51446acd46be799d4b0166e4cffec3264f347ea11feadbe5e11f808b92da834230f87a013316ea699ca5bb4cce164afffe19d36c89aaf7c6f48c7c598079ac

    Score
    10/10
    icedid1584008337bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks