Overview

overview

10

Static

static

0696ce4d10...80.dll

windows7_x64

10

0696ce4d10...80.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0696ce4d1073d56993acf108816e8f6d4cadc0803fc24a1ede47569faeb1ed80

  • Size

    198KB

  • Sample

    210401-vsl3jj6syn

  • MD5

    b40478c9837b46e0c7c58ed6e2b287a0

  • SHA1

    641f010814fecc35133e5d4e679822fed619174d

  • SHA256

    0696ce4d1073d56993acf108816e8f6d4cadc0803fc24a1ede47569faeb1ed80

  • SHA512

    f688172e3e31379a6b45c8b209923738972714db6b7bf907470261f39ad6f0274f6636f029e5e3d5fd454234d27990efb4e5365bd5fc3851dea7d01f27f5d720

Score
10/10
icedid1584008337bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

secondpilots.space

Targets

    • Target

      0696ce4d1073d56993acf108816e8f6d4cadc0803fc24a1ede47569faeb1ed80

    • Size

      198KB

    • MD5

      b40478c9837b46e0c7c58ed6e2b287a0

    • SHA1

      641f010814fecc35133e5d4e679822fed619174d

    • SHA256

      0696ce4d1073d56993acf108816e8f6d4cadc0803fc24a1ede47569faeb1ed80

    • SHA512

      f688172e3e31379a6b45c8b209923738972714db6b7bf907470261f39ad6f0274f6636f029e5e3d5fd454234d27990efb4e5365bd5fc3851dea7d01f27f5d720

    Score
    10/10
    icedid1584008337bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks