Overview

overview

10

Static

static

a2eac98f26...ab.dll

windows7_x64

10

a2eac98f26...ab.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a2eac98f26c51e5dcdf78e707098297de8564d73200341512ad71cf9a3f7bbab
  • Size 278KB
  • Sample220503-angxaadcc7
  • SHA256 a2eac98f26c51e5dcdf78e707098297de8564d73200341512ad71cf9a3f7bbab
  • MD5 SHA1 SHA512
Score
10/10
icedid2398486359bankerloadertrojan

Malware Config

Extracted

Family

  • icedid

Botnet

  • 2398486359

C2

  • kravynolu.cyou

  • nikushotomo.cyou

Attributes
  • auth_var

    1

  • url_path

    /audio/

Extracted

Family

  • icedid

Targets

    • Target
      a2eac98f26c51e5dcdf78e707098297de8564d73200341512ad71cf9a3f7bbab
    • Size 278KB
    • SHA256 a2eac98f26c51e5dcdf78e707098297de8564d73200341512ad71cf9a3f7bbab
    • MD5 SHA1 SHA512
    Score
    10/10
    icedid2398486359bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks