Overview

overview

10

Static

static

83236cf44a...5f.dll

windows7_x64

1

83236cf44a...5f.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83236cf44a4f97d773664ddebd6faaeb6c0fdf809d43632b49e6345217a4b85f

  • Size

    347KB

  • Sample

    220427-wscn1sgbc7

  • MD5

    1437828abd9a9bb73983adfe5c1d42de

  • SHA1

    4b997c7f4fa682dfcf93fdc85a51622d6c09929f

  • SHA256

    83236cf44a4f97d773664ddebd6faaeb6c0fdf809d43632b49e6345217a4b85f

  • SHA512

    e8805fe3359c493419ac5ce606f97eaf3bdd22a9205ad49d6e133a785fcf20954af932a6e31a522f056f02f46bda48b1263a6f4ec961934140791149056d76a5

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

argentinocapuccho.cyou

Targets

    • Target

      83236cf44a4f97d773664ddebd6faaeb6c0fdf809d43632b49e6345217a4b85f

    • Size

      347KB

    • MD5

      1437828abd9a9bb73983adfe5c1d42de

    • SHA1

      4b997c7f4fa682dfcf93fdc85a51622d6c09929f

    • SHA256

      83236cf44a4f97d773664ddebd6faaeb6c0fdf809d43632b49e6345217a4b85f

    • SHA512

      e8805fe3359c493419ac5ce606f97eaf3bdd22a9205ad49d6e133a785fcf20954af932a6e31a522f056f02f46bda48b1263a6f4ec961934140791149056d76a5

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks