Overview

overview

10

Static

static

c5ba1ce043...ef.dll

windows7_x64

10

c5ba1ce043...ef.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5ba1ce043a78fa1c8850a2f471480ef.dll

  • Size

    182KB

  • Sample

    210505-k7ggwt4fsa

  • MD5

    c5ba1ce043a78fa1c8850a2f471480ef

  • SHA1

    463d4139c167ea7b6d8ca143e7a323f95315d86e

  • SHA256

    0df39d0e12024c1a464ca5eb3e1b0614721c7f4e28421dceebfc9dee7d12b421

  • SHA512

    437637b4e364358d18bf7774b253199821329c5b460a0c41ae43f764e2c26f68ace804d0c642e3f7cd0b5d314cda0b0dceeab81748c20ef6e4f6b9d7f21a0b1e

Score
10/10
icedid861670232bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

861670232

C2

provokordino.space

Targets

    • Target

      c5ba1ce043a78fa1c8850a2f471480ef.dll

    • Size

      182KB

    • MD5

      c5ba1ce043a78fa1c8850a2f471480ef

    • SHA1

      463d4139c167ea7b6d8ca143e7a323f95315d86e

    • SHA256

      0df39d0e12024c1a464ca5eb3e1b0614721c7f4e28421dceebfc9dee7d12b421

    • SHA512

      437637b4e364358d18bf7774b253199821329c5b460a0c41ae43f764e2c26f68ace804d0c642e3f7cd0b5d314cda0b0dceeab81748c20ef6e4f6b9d7f21a0b1e

    Score
    10/10
    icedid861670232bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks