icedid | 31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f | Triage

Submit
Reports

Overview

overview

Static

static

31131d336a...7f.dll

windows7_x64

31131d336a...7f.dll

windows10-2004_x64

Sharing

General

Target

31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f
Size

195KB
Sample

220414-ntyzmscbgj
MD5

b633f07c460d74b860420f8ce61e7226
SHA1

6e0df124859121b9ffb08531688beba9780aecd5
SHA256

31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f
SHA512

b4f630911de53aaa4ebf028231e9ba145967e44a01e1102c3245f266ec8d4ea761b6a8ccacbf8a39647d6eb392d882c88edc3550b3e8981c1883d0b4cf5100ce

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f.dll

Resource

win7-20220311-en

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f.dll

Resource

win10v2004-en-20220113

icedid banker loader trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

colombosuede.club

colosssueded.top

Targets

- Target
  
  31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f
- Size
  
  195KB
- MD5
  
  b633f07c460d74b860420f8ce61e7226
- SHA1
  
  6e0df124859121b9ffb08531688beba9780aecd5
- SHA256
  
  31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f
- SHA512
  
  b4f630911de53aaa4ebf028231e9ba145967e44a01e1102c3245f266ec8d4ea761b6a8ccacbf8a39647d6eb392d882c88edc3550b3e8981c1883d0b4cf5100ce
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy