Overview

overview

10

Static

static

23107ae7bb...a0.dll

windows7_x64

10

23107ae7bb...a0.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23107ae7bb231f86c7b94eb0b6e6b82c82f1909c9d0060b79a2738369087b8a0

  • Size

    149KB

  • Sample

    220324-x3lkcaaacr

  • MD5

    ddef1f44300fc974a5be3225253edab8

  • SHA1

    b5f1297c459e4843f9830834a481fbe604db92ea

  • SHA256

    23107ae7bb231f86c7b94eb0b6e6b82c82f1909c9d0060b79a2738369087b8a0

  • SHA512

    24688514519953fd197f503bbe314b3585233d1d3bfd5013810b73267bdd414dbcc6cfb9d213c757d4464a71749d8a16cbc5ae71dd4cebe42721862678f03994

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

rotmistr.club

5kilozhuto.top

Targets

    • Target

      23107ae7bb231f86c7b94eb0b6e6b82c82f1909c9d0060b79a2738369087b8a0

    • Size

      149KB

    • MD5

      ddef1f44300fc974a5be3225253edab8

    • SHA1

      b5f1297c459e4843f9830834a481fbe604db92ea

    • SHA256

      23107ae7bb231f86c7b94eb0b6e6b82c82f1909c9d0060b79a2738369087b8a0

    • SHA512

      24688514519953fd197f503bbe314b3585233d1d3bfd5013810b73267bdd414dbcc6cfb9d213c757d4464a71749d8a16cbc5ae71dd4cebe42721862678f03994

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks