Overview

overview

10

Static

static

401d5da79e...eb.dll

windows7_x64

10

401d5da79e...eb.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    401d5da79e88600ab084da7de03ff5eb.dll

  • Size

    162KB

  • Sample

    210505-29vb336jqn

  • MD5

    401d5da79e88600ab084da7de03ff5eb

  • SHA1

    0afd17ff7908e6d8779a75ee90edc5c4d1946c72

  • SHA256

    8336ac38c10494d7e432640776b13511edd20d709dc74e9455cbd167b9f81364

  • SHA512

    34f1400e8e75996683f02b8085e0aaa249e4e9064b710ab80e7ffb40c706e732950210b47b9c0469c3fa3b2fb1aaa95f89881a21b7ffee3654ec222ccc1f72f0

Score
10/10
icedid861670232bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

861670232

C2

provokordino.space

Targets

    • Target

      401d5da79e88600ab084da7de03ff5eb.dll

    • Size

      162KB

    • MD5

      401d5da79e88600ab084da7de03ff5eb

    • SHA1

      0afd17ff7908e6d8779a75ee90edc5c4d1946c72

    • SHA256

      8336ac38c10494d7e432640776b13511edd20d709dc74e9455cbd167b9f81364

    • SHA512

      34f1400e8e75996683f02b8085e0aaa249e4e9064b710ab80e7ffb40c706e732950210b47b9c0469c3fa3b2fb1aaa95f89881a21b7ffee3654ec222ccc1f72f0

    Score
    10/10
    icedid861670232bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks