Overview

overview

10

Static

static

8434de0f49...5d.dll

windows7_x64

10

8434de0f49...5d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d

  • Size

    159KB

  • Sample

    211201-vdy32ahbd8

  • MD5

    1179fd19e9fa97eb607943ce9f3f1528

  • SHA1

    d166ecc892afa5b75f40ce58ff91e29dc24408b9

  • SHA256

    8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d

  • SHA512

    a33c8b6c073dca360b73620839a33e74978eded8a917759d8f4661b3eff107ba88d1f4ab22ea2aff70c28c687d1f96d62dece61bb625de3c0615626d96663585

Score
10/10
icedid256587737bankertrojan

Malware Config

Extracted

Family

icedid

Botnet

256587737

C2

berrowernew.casa

gambitsniper.digital

desantogambito.agency

xantummassacre.golf

naturolinf.top

mikugivetonik.top
Attributes
  • auth_var

    11

  • url_path

    /news/

Targets

    • Target

      8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d

    • Size

      159KB

    • MD5

      1179fd19e9fa97eb607943ce9f3f1528

    • SHA1

      d166ecc892afa5b75f40ce58ff91e29dc24408b9

    • SHA256

      8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d

    • SHA512

      a33c8b6c073dca360b73620839a33e74978eded8a917759d8f4661b3eff107ba88d1f4ab22ea2aff70c28c687d1f96d62dece61bb625de3c0615626d96663585

    Score
    10/10
    icedid256587737bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks