Overview

overview

10

Static

static

63964c4e2e...22.dll

windows7_x64

10

63964c4e2e...22.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63964c4e2eb6bad3591d09c708355522.dll

  • Size

    176KB

  • Sample

    210510-lvvr9x321n

  • MD5

    63964c4e2eb6bad3591d09c708355522

  • SHA1

    df3dca69becf159b649788d3044b63687a704799

  • SHA256

    3a02a1c45007574927d5b8efd8fe805ac9885849c67e4b392367b3373666d0c4

  • SHA512

    91373858e1d3c7b6be7fbcb1dcf3a8b4d1458390077d32a5ae1d2345533d881918cd3e81d9dd153b9a1ed6e8d2365c9cdebdc21d0e598c7b133c5b80fc3b4c95

Score
10/10
icedid861670232bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

861670232

C2

provokordino.space

Targets

    • Target

      63964c4e2eb6bad3591d09c708355522.dll

    • Size

      176KB

    • MD5

      63964c4e2eb6bad3591d09c708355522

    • SHA1

      df3dca69becf159b649788d3044b63687a704799

    • SHA256

      3a02a1c45007574927d5b8efd8fe805ac9885849c67e4b392367b3373666d0c4

    • SHA512

      91373858e1d3c7b6be7fbcb1dcf3a8b4d1458390077d32a5ae1d2345533d881918cd3e81d9dd153b9a1ed6e8d2365c9cdebdc21d0e598c7b133c5b80fc3b4c95

    Score
    10/10
    icedid861670232bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks