Overview

overview

10

Static

static

75aa737c57...9e.dll

windows7_x64

10

75aa737c57...9e.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e

  • Size

    625KB

  • Sample

    220417-hwgv9achf3

  • MD5

    f446cbf6a507d8d40677b846671a85ab

  • SHA1

    48a13826bd7e3ba6a24abadcf3ae4dcfcdd09d43

  • SHA256

    75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e

  • SHA512

    cf41217e8ebf8dd4707db07759e67bcce4af3cd87228d11c5645b7df97b342a419ff0050ec1d65a1ec01467c80d32acfc1ebe60249d94809711d9164feaf0b03

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

flathommy.top

Targets

    • Target

      75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e

    • Size

      625KB

    • MD5

      f446cbf6a507d8d40677b846671a85ab

    • SHA1

      48a13826bd7e3ba6a24abadcf3ae4dcfcdd09d43

    • SHA256

      75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e

    • SHA512

      cf41217e8ebf8dd4707db07759e67bcce4af3cd87228d11c5645b7df97b342a419ff0050ec1d65a1ec01467c80d32acfc1ebe60249d94809711d9164feaf0b03

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks