Overview

overview

10

Static

static

dart.dll

windows7_x64

10

dart.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dart.dll

  • Size

    148KB

  • Sample

    220322-pazbqsbdgj

  • MD5

    54c454aa55315437a8da08eacb02e1a6

  • SHA1

    40f55903a26df3a30608e131e9352503d04adcb3

  • SHA256

    8852d2161c2b591a6a1743590d1941beb659a7d4e07187627fcaff8c5ba56a76

  • SHA512

    6adac5866c50840fc8ecfb7b0cd4c352a55b1b2f90d7d7f941a195283c844ab9863ac6d17d08631285990255c08f3a8c7a0ba4f4eb717c2c94629f378028ab3c

Score
10/10
icedid3546287305bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3546287305

C2

oceriesfornot.top

Targets

    • Target

      dart.dll

    • Size

      148KB

    • MD5

      54c454aa55315437a8da08eacb02e1a6

    • SHA1

      40f55903a26df3a30608e131e9352503d04adcb3

    • SHA256

      8852d2161c2b591a6a1743590d1941beb659a7d4e07187627fcaff8c5ba56a76

    • SHA512

      6adac5866c50840fc8ecfb7b0cd4c352a55b1b2f90d7d7f941a195283c844ab9863ac6d17d08631285990255c08f3a8c7a0ba4f4eb717c2c94629f378028ab3c

    Score
    10/10
    icedid3546287305bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks