Overview

overview

10

Static

static

959d01ef11...2f.dll

windows7_x64

10

959d01ef11...2f.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    959d01ef11ba76ddc7942c39d4c017b63aa26513f0d2f.dll

  • Size

    199KB

  • Sample

    210402-vexzkfcw2a

  • MD5

    c73d3fda8902766e09951c7bde6ccc48

  • SHA1

    73a0f8ec2cb1a2811ded18d1ae6adc54273d655f

  • SHA256

    959d01ef11ba76ddc7942c39d4c017b63aa26513f0d2fac1b8d8bfcb97373e23

  • SHA512

    6afeaa85ad7cfc39770b13d0e8518ea9824466fbfdce3a0c2fcf7b1d38342b79ec88c5d33ea6103e29ecf2cacd0ba9ebaf7151fbc48159d4e4835770204cc6ab

Score
10/10
icedid1584008337bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

stoikoplot.xyz

Targets

    • Target

      959d01ef11ba76ddc7942c39d4c017b63aa26513f0d2f.dll

    • Size

      199KB

    • MD5

      c73d3fda8902766e09951c7bde6ccc48

    • SHA1

      73a0f8ec2cb1a2811ded18d1ae6adc54273d655f

    • SHA256

      959d01ef11ba76ddc7942c39d4c017b63aa26513f0d2fac1b8d8bfcb97373e23

    • SHA512

      6afeaa85ad7cfc39770b13d0e8518ea9824466fbfdce3a0c2fcf7b1d38342b79ec88c5d33ea6103e29ecf2cacd0ba9ebaf7151fbc48159d4e4835770204cc6ab

    Score
    10/10
    icedid1584008337bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks