Overview

overview

10

Static

static

27ff1bd0e2...2c.dll

windows7_x64

10

27ff1bd0e2...2c.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27ff1bd0e222bc76fce44929314c9be6e8a6c1ab35934fa4437cf2bfce34ca2c

  • Size

    310KB

  • Sample

    220326-nk839agfdk

  • MD5

    758456fa79125ce50201b45d78be19ed

  • SHA1

    a017a755908d26bc0f4bbc563590b29c96df5acc

  • SHA256

    27ff1bd0e222bc76fce44929314c9be6e8a6c1ab35934fa4437cf2bfce34ca2c

  • SHA512

    bd8682ed58888d0d9493501f1d990c54184769aa24252190e092ed09b386d2c8e28746df596ee92633dcc67b4e37ac7d62ab0b7b6dffe4157e4f2c2a561d4640

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

revopilte3.club

aweragiprooslk.cyou

Targets

    • Target

      27ff1bd0e222bc76fce44929314c9be6e8a6c1ab35934fa4437cf2bfce34ca2c

    • Size

      310KB

    • MD5

      758456fa79125ce50201b45d78be19ed

    • SHA1

      a017a755908d26bc0f4bbc563590b29c96df5acc

    • SHA256

      27ff1bd0e222bc76fce44929314c9be6e8a6c1ab35934fa4437cf2bfce34ca2c

    • SHA512

      bd8682ed58888d0d9493501f1d990c54184769aa24252190e092ed09b386d2c8e28746df596ee92633dcc67b4e37ac7d62ab0b7b6dffe4157e4f2c2a561d4640

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks