Overview

overview

10

Static

static

af779d3768...49.dll

windows7_x64

10

af779d3768...49.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af779d3768b4efbcc4176a861a572fe3358496a9ef62c41ffb6af288ecefd449

  • Size

    238KB

  • Sample

    220319-ltsfrafbh2

  • MD5

    ca0c92b07a5001adbd263804ccf72f59

  • SHA1

    70074da1cf1c144f3372244263d497945545106b

  • SHA256

    af779d3768b4efbcc4176a861a572fe3358496a9ef62c41ffb6af288ecefd449

  • SHA512

    c4a8710ea6f51e23cebb0948f6d8908ca7beffcb0c3fc6ee274d877197b9833d1405e7abe8049b006a9eadb9923eb3b01b39f4b02e63b820d8cf8eff8e5e7990

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

felpojdhf8980.cyou

azoperfdeoti85.xyz

Targets

    • Target

      af779d3768b4efbcc4176a861a572fe3358496a9ef62c41ffb6af288ecefd449

    • Size

      238KB

    • MD5

      ca0c92b07a5001adbd263804ccf72f59

    • SHA1

      70074da1cf1c144f3372244263d497945545106b

    • SHA256

      af779d3768b4efbcc4176a861a572fe3358496a9ef62c41ffb6af288ecefd449

    • SHA512

      c4a8710ea6f51e23cebb0948f6d8908ca7beffcb0c3fc6ee274d877197b9833d1405e7abe8049b006a9eadb9923eb3b01b39f4b02e63b820d8cf8eff8e5e7990

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks