Overview

overview

10

Static

static

c6765b0c79...fa.dll

windows7_x64

10

c6765b0c79...fa.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6765b0c795af907637ebc5e0703a285b44041e96d43e81922f8601a2346cafa

  • Size

    389KB

  • Sample

    220215-r22x2shcen

  • MD5

    92e1d3f1ed5bf56b9f99991be15e9af6

  • SHA1

    863e3f09317b61d8585c01f915a53b4b576e06c4

  • SHA256

    2d46a9c9f5ddb9afcedccecbdc1fe11087a0fc8cd3ce6431e4d05d7c31211d40

  • SHA512

    0e57d36310a0659ce9b36c92d36429eb5417631c68f6d91dbb41463439f5181f6e19de3fe73153dfc3f46fd63cf03cc431d566d790e3f7bd24aae5257ff26242

Score
10/10
icedid412701809bankersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

412701809

C2

hdtrenity.com

Targets

    • Target

      c6765b0c795af907637ebc5e0703a285b44041e96d43e81922f8601a2346cafa

    • Size

      583KB

    • MD5

      7d1233f06811c1baaac3cd45ac6248f7

    • SHA1

      a8a213d13e6e91954bd7e46158bf96ef52695bfe

    • SHA256

      c6765b0c795af907637ebc5e0703a285b44041e96d43e81922f8601a2346cafa

    • SHA512

      b2e02bc7a2f66b4570493b61a70e3793e75c67d03711ea8196cff6397908941e2a69177580cba7a7022a769df3dd5fc1823115e409fd3f1d26329bfd0f26ff59

    Score
    10/10
    icedid412701809bankertrojansuricata

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks