Overview

overview

10

Static

static

3171.dll

windows7_x64

10

3171.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3171.dll

  • Size

    82KB

  • Sample

    211106-snclnscaaj

  • MD5

    c6d828d2dbb3bce4e2e9b8da097aed49

  • SHA1

    8240e681a6e5836d8961c9e8ec72f4bacec6d685

  • SHA256

    f5d8d8d0235b9b71e88297f00acf6ea2277b1e8662a7fa8d17c1a6c535f9e351

  • SHA512

    61026e0d8d3bde40fc54b4a7fb701afe032a392d5aa0bac539ca9f6fb2eba5ddebbb1e295284ddb397ecda76ecb279bc8cde1949c346445b1eb5a54fb3b3679d

Score
10/10
icedid3055572094bankersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3055572094

C2

actuallyobligat.ink

Targets

    • Target

      3171.dll

    • Size

      82KB

    • MD5

      c6d828d2dbb3bce4e2e9b8da097aed49

    • SHA1

      8240e681a6e5836d8961c9e8ec72f4bacec6d685

    • SHA256

      f5d8d8d0235b9b71e88297f00acf6ea2277b1e8662a7fa8d17c1a6c535f9e351

    • SHA512

      61026e0d8d3bde40fc54b4a7fb701afe032a392d5aa0bac539ca9f6fb2eba5ddebbb1e295284ddb397ecda76ecb279bc8cde1949c346445b1eb5a54fb3b3679d

    Score
    10/10
    icedid3055572094bankersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks