Overview

overview

10

Static

static

80ff2a21f0...89.dll

windows7_x64

10

80ff2a21f0...89.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80ff2a21f0798873593b0f06f0860221019933f12fe4c623fabb5fe1062b4789

  • Size

    199KB

  • Sample

    210402-a1zydg8gsa

  • MD5

    1273fa4d6935760f15e42a61045b7a6c

  • SHA1

    3017f1ecce5378e7b30ee14f244337c34ca37d48

  • SHA256

    80ff2a21f0798873593b0f06f0860221019933f12fe4c623fabb5fe1062b4789

  • SHA512

    2da9f1a6217e92afe88e25fb5bbe4f133daa7fb5e56f63d2c5e72a38121d60644e37dd2de022886fd02f43abcaac237a2b514624160ebd219e9994c2757ef700

Score
10/10
icedid1584008337bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

stoikoplot.xyz

Targets

    • Target

      80ff2a21f0798873593b0f06f0860221019933f12fe4c623fabb5fe1062b4789

    • Size

      199KB

    • MD5

      1273fa4d6935760f15e42a61045b7a6c

    • SHA1

      3017f1ecce5378e7b30ee14f244337c34ca37d48

    • SHA256

      80ff2a21f0798873593b0f06f0860221019933f12fe4c623fabb5fe1062b4789

    • SHA512

      2da9f1a6217e92afe88e25fb5bbe4f133daa7fb5e56f63d2c5e72a38121d60644e37dd2de022886fd02f43abcaac237a2b514624160ebd219e9994c2757ef700

    Score
    10/10
    icedid1584008337bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks