Overview

overview

10

Static

static

main2.dll

windows7_x64

10

main2.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main2.dll

  • Size

    1.2MB

  • Sample

    220309-2r1mcabgh7

  • MD5

    84e2db5363fc3e1b50f4ffbcc24094b1

  • SHA1

    e538933c86c67baf070ccd2f3db06e1f9d9d9636

  • SHA256

    cecb397cea8fda07826578b798f0bde12053ea4bcb6bed6e057ea4d7a20fbb8b

  • SHA512

    1bfe51a292cf30a3af34e5d0f1ded75406efbc2c9bf19530ed4094c08c76fe9c272ce129b0d6a1a3b640793f55586ff4f58e7cff151b9f72ff0b8a6a7c1546a2

Score
10/10
icedid3993579037bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

3993579037

C2

yourgroceries.top

Targets

    • Target

      main2.dll

    • Size

      1.2MB

    • MD5

      84e2db5363fc3e1b50f4ffbcc24094b1

    • SHA1

      e538933c86c67baf070ccd2f3db06e1f9d9d9636

    • SHA256

      cecb397cea8fda07826578b798f0bde12053ea4bcb6bed6e057ea4d7a20fbb8b

    • SHA512

      1bfe51a292cf30a3af34e5d0f1ded75406efbc2c9bf19530ed4094c08c76fe9c272ce129b0d6a1a3b640793f55586ff4f58e7cff151b9f72ff0b8a6a7c1546a2

    Score
    10/10
    icedid3993579037bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks