Overview

overview

10

Static

static

ofc.dll

windows7_x64

10

ofc.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ofc.dll

  • Size

    375KB

  • Sample

    211118-w8xdcsfahq

  • MD5

    4e28e9e6d6444d1ac41dd7ef7da32196

  • SHA1

    0b4eab4641ac9058babf8924610f8c58fcb5b6e4

  • SHA256

    d5a4fcb0e552cad22b1a907e874295b08e83d58bd83f9b4788c90aaad263cd87

  • SHA512

    4a33193f5585c8183eee374ca12d3cec8566b8dbdb6bf2a3abd80d24248010d288608368403986d84e5b1d219b8f7a76e1c50a1c82f3dafad560b945becabb36

Score
10/10
icedid4258209311bankersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

4258209311

C2

sauceson.ink

Targets

    • Target

      ofc.dll

    • Size

      375KB

    • MD5

      4e28e9e6d6444d1ac41dd7ef7da32196

    • SHA1

      0b4eab4641ac9058babf8924610f8c58fcb5b6e4

    • SHA256

      d5a4fcb0e552cad22b1a907e874295b08e83d58bd83f9b4788c90aaad263cd87

    • SHA512

      4a33193f5585c8183eee374ca12d3cec8566b8dbdb6bf2a3abd80d24248010d288608368403986d84e5b1d219b8f7a76e1c50a1c82f3dafad560b945becabb36

    Score
    10/10
    icedid4258209311bankersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks