Overview

overview

10

Static

static

d07e2c046e...d1.dll

windows7_x64

10

d07e2c046e...d1.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d07e2c046e4fb55e95f6acd59d50f3bdad2f7a96eb7d1.dll

  • Size

    199KB

  • Sample

    210402-6pqm694rmj

  • MD5

    faa384783abb0ca7edb41617d7bba4e6

  • SHA1

    d126542c9ea85cfac0ddfa0ed3e9ed4129d3f8ed

  • SHA256

    d07e2c046e4fb55e95f6acd59d50f3bdad2f7a96eb7d15654b3eb80551968401

  • SHA512

    fb6401c529c1293200adca93d8dc6724c4c67c21aa88746301666ae86042ff930bf623b1c08042f92087e7739a191f044f9848a86ec5f44e6471ba1ac170e509

Score
10/10
icedid1584008337bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

stoikoplot.xyz

Targets

    • Target

      d07e2c046e4fb55e95f6acd59d50f3bdad2f7a96eb7d1.dll

    • Size

      199KB

    • MD5

      faa384783abb0ca7edb41617d7bba4e6

    • SHA1

      d126542c9ea85cfac0ddfa0ed3e9ed4129d3f8ed

    • SHA256

      d07e2c046e4fb55e95f6acd59d50f3bdad2f7a96eb7d15654b3eb80551968401

    • SHA512

      fb6401c529c1293200adca93d8dc6724c4c67c21aa88746301666ae86042ff930bf623b1c08042f92087e7739a191f044f9848a86ec5f44e6471ba1ac170e509

    Score
    10/10
    icedid1584008337bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks