Overview

overview

10

Static

static

46b7f631ad...2d.dll

windows7_x64

10

46b7f631ad...2d.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

  • Size

    158KB

  • Sample

    220319-nj6azaggep

  • MD5

    06c0605f3f242ddfb0347bbdd153d88b

  • SHA1

    e8b326751005b5a6d262d3967315704e7b09f9a1

  • SHA256

    46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

  • SHA512

    e9497c1f6722a96f9a7b29004ebf9bda1976b761b41f55afa98c7edeef156cfcbc35f9c11fd0a22e027154ef34179314e859b2761f070f80ff7640fd1114ad3f

Score
10/10
icedidbankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

C2

gelevandren.cyou

greenflopper.best

qassertolik.top

wassermannshop.club

Targets

    • Target

      46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

    • Size

      158KB

    • MD5

      06c0605f3f242ddfb0347bbdd153d88b

    • SHA1

      e8b326751005b5a6d262d3967315704e7b09f9a1

    • SHA256

      46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

    • SHA512

      e9497c1f6722a96f9a7b29004ebf9bda1976b761b41f55afa98c7edeef156cfcbc35f9c11fd0a22e027154ef34179314e859b2761f070f80ff7640fd1114ad3f

    Score
    10/10
    icedidbankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

      suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

      suricata

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks