Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dd1fe05bd7a7009f3fec1f0cd35aaccbb8893fe117bb2f8a3df2b8dabe2c5aa

  • Size

    490KB

  • Sample

    220221-lss1wsahfk

  • MD5

    5c1f1ce1edab3b9fc2e31969763de32c

  • SHA1

    635d5e0678ee9d9bb843a7b73ef581578a9cb7bf

  • SHA256

    0dd1fe05bd7a7009f3fec1f0cd35aaccbb8893fe117bb2f8a3df2b8dabe2c5aa

  • SHA512

    d9c20c87f7fc7ba5b93466c5da75ebcc2af8eaf4f10684457e6382961540582e39c0472318549a56fc0c80184df9cae3f3386a1866bf0bf016725132515289a2

Score
10/10
icedid3467965077bankersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      0dd1fe05bd7a7009f3fec1f0cd35aaccbb8893fe117bb2f8a3df2b8dabe2c5aa

    • Size

      490KB

    • MD5

      5c1f1ce1edab3b9fc2e31969763de32c

    • SHA1

      635d5e0678ee9d9bb843a7b73ef581578a9cb7bf

    • SHA256

      0dd1fe05bd7a7009f3fec1f0cd35aaccbb8893fe117bb2f8a3df2b8dabe2c5aa

    • SHA512

      d9c20c87f7fc7ba5b93466c5da75ebcc2af8eaf4f10684457e6382961540582e39c0472318549a56fc0c80184df9cae3f3386a1866bf0bf016725132515289a2

    Score
    10/10
    icedid3467965077bankersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1

MITRE ATT&CK Matrix

Tasks