Overview

overview

10

Static

static

0049eeaf93...d1.dll

windows7_x64

10

0049eeaf93...d1.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0049eeaf93e156383f1ab7e68282cc53aea677d62254087c9e199f01ae356cd1

  • Size

    614KB

  • Sample

    220209-vhz6wsbbgm

  • MD5

    dd9a900b5609b9458ad2cb724cc02f2b

  • SHA1

    7bc65ba09f22681e0686f67fd435c12ec3918a16

  • SHA256

    0049eeaf93e156383f1ab7e68282cc53aea677d62254087c9e199f01ae356cd1

  • SHA512

    2e3a5eaa9cba16a2008c339d1394bbfec0055bf05b1fe05cb7963ca2505a33aa57729cbda162f8f5370bc6aa733c8fd0c739d04668c2b915564890163873f438

Score
10/10
icedid1732687004bankersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

1732687004

C2

keepfootbal.com

Targets

    • Target

      0049eeaf93e156383f1ab7e68282cc53aea677d62254087c9e199f01ae356cd1

    • Size

      614KB

    • MD5

      dd9a900b5609b9458ad2cb724cc02f2b

    • SHA1

      7bc65ba09f22681e0686f67fd435c12ec3918a16

    • SHA256

      0049eeaf93e156383f1ab7e68282cc53aea677d62254087c9e199f01ae356cd1

    • SHA512

      2e3a5eaa9cba16a2008c339d1394bbfec0055bf05b1fe05cb7963ca2505a33aa57729cbda162f8f5370bc6aa733c8fd0c739d04668c2b915564890163873f438

    Score
    10/10
    icedid1732687004bankersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks