Overview

overview

10

Static

static

0d48fb1f5c...a1.dll

windows7_x64

10

0d48fb1f5c...a1.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d48fb1f5c0f457ca4506317d90802a1.dll

  • Size

    176KB

  • Sample

    210505-f7h9sqchnx

  • MD5

    0d48fb1f5c0f457ca4506317d90802a1

  • SHA1

    fd29d4e566bf73cd9ac3e87320a43b4e524792e5

  • SHA256

    4646d0ec1ed0ef6f241858c944855e62bb4398c7edc3c40085b2089e976fb726

  • SHA512

    a4a704b4e776af331146aaaf70006fb116051223529c06d02fa6e1f36efc25aa1743f8f790382582d057ce4d72c94dc513c1419db1cee9f2da198fafad304330

Score
10/10
icedid861670232bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

861670232

C2

provokordino.space

Targets

    • Target

      0d48fb1f5c0f457ca4506317d90802a1.dll

    • Size

      176KB

    • MD5

      0d48fb1f5c0f457ca4506317d90802a1

    • SHA1

      fd29d4e566bf73cd9ac3e87320a43b4e524792e5

    • SHA256

      4646d0ec1ed0ef6f241858c944855e62bb4398c7edc3c40085b2089e976fb726

    • SHA512

      a4a704b4e776af331146aaaf70006fb116051223529c06d02fa6e1f36efc25aa1743f8f790382582d057ce4d72c94dc513c1419db1cee9f2da198fafad304330

    Score
    10/10
    icedid861670232bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks