Overview

overview

10

Static

static

namespaceV...pg.dll

windows7_x64

10

namespaceV...pg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    namespaceVariableRemove.jpg

  • Size

    41KB

  • Sample

    210506-dgs34wpmps

  • MD5

    4474dd4c14f76b6b40f855b9aae628fa

  • SHA1

    226f5e308048746b650ca7dc587fd92639f938e0

  • SHA256

    93e5fc51525d584a80db2505638f0f9237bff8d01adc330049a414b45c7a811c

  • SHA512

    3b8c248997cc29d8898743ab6dfca51ba4ff735f197523252ac14cadcd5cde26f719680425f55185604efeeaac2ea34eb41a0b5c04d35c764df7f1b33a69889a

Score
10/10
icedid2941843931bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

2941843931

C2

dsedertyhuiokle.top

Targets

    • Target

      namespaceVariableRemove.jpg

    • Size

      41KB

    • MD5

      4474dd4c14f76b6b40f855b9aae628fa

    • SHA1

      226f5e308048746b650ca7dc587fd92639f938e0

    • SHA256

      93e5fc51525d584a80db2505638f0f9237bff8d01adc330049a414b45c7a811c

    • SHA512

      3b8c248997cc29d8898743ab6dfca51ba4ff735f197523252ac14cadcd5cde26f719680425f55185604efeeaac2ea34eb41a0b5c04d35c764df7f1b33a69889a

    Score
    10/10
    icedid2941843931bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks