Overview

overview

10

Static

static

23c78e805b...11.dll

windows7_x64

10

23c78e805b...11.dll

windows10-2004_x64

10

Analysis

  • max time kernel
    133s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    25-02-2022 00:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811.dll

  • Size

    503KB

  • MD5

    484d9615f10be93fe9e5fe475f4bcdc5

  • SHA1

    3f5d2f28365ad8a2f3d6ecbfe5473bc74aa30b60

  • SHA256

    23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811

  • SHA512

    8d3474b1dce09e0930be89d4edcc6387bc348a2a8b8c0545392a8a8e4d4e409ddd3b858ba018aa6031a39253ac619c9ea94969e59a52b42ff3739a5249d7bb2b

Score
10/10
icedid3106999479bankertrojan

Malware Config

Extracted

Family

icedid

Botnet

3106999479

C2

balliordan.com

oprenfirst.com

loremurs.com
Attributes
  • auth_var

    17

  • url_path

    /news/

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811.dll,#1
    1⤵
      PID:1392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1392-130-0x000001FBC05E0000-0x000001FBC05E5000-memory.dmp

      Filesize

      20KB

      Download