icedid | d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8 | Triage

Submit
Reports

Overview

overview

Static

static

d0803a6fd6...e8.dll

windows7_x64

d0803a6fd6...e8.dll

windows10-2004_x64

Sharing

General

Target

d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8
Size

195KB
Sample

220414-rseq6afgc6
MD5

141b5d7351136439cf47c73e1d7e7e1f
SHA1

ee5a21035a20702d1633f918613cb54440be4679
SHA256

d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8
SHA512

d9179c7e6a95391c55a418ccf8e67108e8e86e0eb959b8b1c232b8dc99978dce58c0db26d682a8ffdce300092ad223ca07f5ea04f1df0d30522096c4bf01668e

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8.dll

Resource

win7-20220311-en

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8.dll

Resource

win10v2004-20220310-en

icedid banker loader trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

colombosuede.club

colosssueded.top

Targets

- Target
  
  d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8
- Size
  
  195KB
- MD5
  
  141b5d7351136439cf47c73e1d7e7e1f
- SHA1
  
  ee5a21035a20702d1633f918613cb54440be4679
- SHA256
  
  d0803a6fd689e0a771c1008a6e0d9ee6093ee7369f485354b27b0eab7d8166e8
- SHA512
  
  d9179c7e6a95391c55a418ccf8e67108e8e86e0eb959b8b1c232b8dc99978dce58c0db26d682a8ffdce300092ad223ca07f5ea04f1df0d30522096c4bf01668e
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy