icedid | f72261f118585ab983e93f8913112a6b0f4cb642fce5dc28250127239ab21470 | Triage

Submit
Reports

Overview

overview

Static

static

125d4afb69...61.dll

windows7_x64

1

125d4afb69...61.dll

windows10_x64

Sharing

General

Target

125d4afb696a4a29988d16b6e5073561.dll
Size

187KB
Sample

210505-z2kcwky762
MD5

125d4afb696a4a29988d16b6e5073561
SHA1

a13cf3c89a9f3b53f0f360e75e85ec5f1b89e71b
SHA256

f72261f118585ab983e93f8913112a6b0f4cb642fce5dc28250127239ab21470
SHA512

8ba85fb23f700594a259c4db63ffe82405c2288cc821ba7c853750a88b2479dc206b215c48a826010c408584e9b449c408760f65e3be87b33f4eec34e8d1ba39

Score

10^/10

icedid 861670232 banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

125d4afb696a4a29988d16b6e5073561.dll

Resource

win7v20210410

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

125d4afb696a4a29988d16b6e5073561.dll

Resource

win10v20210410

icedid 861670232 banker loader trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

Campaign

861670232

C2

provokordino.space

Targets

- Target
  
  125d4afb696a4a29988d16b6e5073561.dll
- Size
  
  187KB
- MD5
  
  125d4afb696a4a29988d16b6e5073561
- SHA1
  
  a13cf3c89a9f3b53f0f360e75e85ec5f1b89e71b
- SHA256
  
  f72261f118585ab983e93f8913112a6b0f4cb642fce5dc28250127239ab21470
- SHA512
  
  8ba85fb23f700594a259c4db63ffe82405c2288cc821ba7c853750a88b2479dc206b215c48a826010c408584e9b449c408760f65e3be87b33f4eec34e8d1ba39
Score

10^/10

icedid 861670232 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID First Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

icedid861670232bankerloadertrojan

© 2018-2024

Terms | Privacy