Overview

overview

10

Static

static

31131d336a...7f.dll

windows7_x64

10

31131d336a...7f.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f

  • Size

    195KB

  • Sample

    220414-ntyzmscbgj

  • MD5

    b633f07c460d74b860420f8ce61e7226

  • SHA1

    6e0df124859121b9ffb08531688beba9780aecd5

  • SHA256

    31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f

  • SHA512

    b4f630911de53aaa4ebf028231e9ba145967e44a01e1102c3245f266ec8d4ea761b6a8ccacbf8a39647d6eb392d882c88edc3550b3e8981c1883d0b4cf5100ce

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

colombosuede.club

colosssueded.top

Targets

    • Target

      31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f

    • Size

      195KB

    • MD5

      b633f07c460d74b860420f8ce61e7226

    • SHA1

      6e0df124859121b9ffb08531688beba9780aecd5

    • SHA256

      31131d336a6af187a9c3133be42b933439cfb53f5e0296d1b530c55bd186e37f

    • SHA512

      b4f630911de53aaa4ebf028231e9ba145967e44a01e1102c3245f266ec8d4ea761b6a8ccacbf8a39647d6eb392d882c88edc3550b3e8981c1883d0b4cf5100ce

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks