Overview

overview

10

Static

static

ec6ea6fa0e...68.dll

windows7_x64

10

ec6ea6fa0e...68.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec6ea6fa0e91dd56cf84aefaac26e868.dll

  • Size

    244KB

  • Sample

    210505-rna2t66ese

  • MD5

    ec6ea6fa0e91dd56cf84aefaac26e868

  • SHA1

    85ae98965a3802d284bfc76d81be9aecf092e6ea

  • SHA256

    d0db91bd11f41eb10ee5dce39e37a71a05a96264caa11c7b01ac31125b81b072

  • SHA512

    d2cd1c4770171a9e95be0115569d7f45865c0f6266a4ebc64e78907e9a0cf52d00ae7f59a490496a41a38bf0a48a2b6e7a07af5d2a4508f095ec99043c655fbe

Score
10/10
icedid3616463248bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3616463248

C2

tvorartificialnature.xyz

Targets

    • Target

      ec6ea6fa0e91dd56cf84aefaac26e868.dll

    • Size

      244KB

    • MD5

      ec6ea6fa0e91dd56cf84aefaac26e868

    • SHA1

      85ae98965a3802d284bfc76d81be9aecf092e6ea

    • SHA256

      d0db91bd11f41eb10ee5dce39e37a71a05a96264caa11c7b01ac31125b81b072

    • SHA512

      d2cd1c4770171a9e95be0115569d7f45865c0f6266a4ebc64e78907e9a0cf52d00ae7f59a490496a41a38bf0a48a2b6e7a07af5d2a4508f095ec99043c655fbe

    Score
    10/10
    icedid3616463248bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks