Overview

overview

10

Static

static

6e12475814...e3.dll

windows7_x64

10

6e12475814...e3.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e12475814e89c75ead27a22fe4d39e3.dll

  • Size

    163KB

  • Sample

    210506-4we1xtves2

  • MD5

    6e12475814e89c75ead27a22fe4d39e3

  • SHA1

    84b8d91aecf42d519c48ec1d1aeae0140d377e33

  • SHA256

    13fa17bdaa50b6ddeabad9b5ad62e269f81ce1295b5847027afc4fc7ceeb1904

  • SHA512

    09eb974cf50c0be102e0595c48e05537d6c8c2c28bf77b56f4d7b747f6bff718bd33c5e94a33eac7b572b19f33184c27bbbe4b824737b34f156dfbcc2199d020

Score
10/10
icedid861670232bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

861670232

C2

provokordino.space

Targets

    • Target

      6e12475814e89c75ead27a22fe4d39e3.dll

    • Size

      163KB

    • MD5

      6e12475814e89c75ead27a22fe4d39e3

    • SHA1

      84b8d91aecf42d519c48ec1d1aeae0140d377e33

    • SHA256

      13fa17bdaa50b6ddeabad9b5ad62e269f81ce1295b5847027afc4fc7ceeb1904

    • SHA512

      09eb974cf50c0be102e0595c48e05537d6c8c2c28bf77b56f4d7b747f6bff718bd33c5e94a33eac7b572b19f33184c27bbbe4b824737b34f156dfbcc2199d020

    Score
    10/10
    icedid861670232bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks