Overview

overview

10

Static

static

d306a9e5b5...2d.dll

windows7_x64

10

d306a9e5b5...2d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2d.dll

  • Size

    198KB

  • Sample

    210401-vcfnw238n2

  • MD5

    e7cb3ca91b7eaf1e512d8717f73c9251

  • SHA1

    246be5925b81d3532ee11286f8548cbf1dcf8ffd

  • SHA256

    d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2db819349cf0d264843c1

  • SHA512

    48668197782ff603a4ee15dd7694728563dc72ddd97a44844e4e6fe4e49b9b62c26122894c641f642c2003d5eb21d37d64ae09cea19fc7da992a8dd145c52022

Score
10/10
icedid1584008337bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

secondpilots.space

Targets

    • Target

      d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2d.dll

    • Size

      198KB

    • MD5

      e7cb3ca91b7eaf1e512d8717f73c9251

    • SHA1

      246be5925b81d3532ee11286f8548cbf1dcf8ffd

    • SHA256

      d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2db819349cf0d264843c1

    • SHA512

      48668197782ff603a4ee15dd7694728563dc72ddd97a44844e4e6fe4e49b9b62c26122894c641f642c2003d5eb21d37d64ae09cea19fc7da992a8dd145c52022

    Score
    10/10
    icedid1584008337bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks