icedid | 38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c | Triage

Submit
Reports

Overview

overview

Static

static

38a280fd17...0c.dll

windows7_x64

38a280fd17...0c.dll

windows10-2004_x64

Sharing

General

Target

38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c
Size

297KB
Sample

220503-ankm6sfgcj
MD5

dd4b3ee2e9b53ab44fa2bc852d287b16
SHA1

c0b3b34879d008ecbcd5b25b2940872336bc529b
SHA256

38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c
SHA512

9cc3e035161c19283ab62ddae7456c831109040272ffc0f26df7c3e98896d9dcbdd1d994d0ce2d3be8de67e6c0f64a7c6d657e3faa46f9716f7c61d9e3b9112f

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c.dll

Resource

win7-20220414-en

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c.dll

Resource

win10v2004-20220414-en

icedid banker loader trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

filopipilo.top

fihokiliopo.pw

Targets

- Target
  
  38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c
- Size
  
  297KB
- MD5
  
  dd4b3ee2e9b53ab44fa2bc852d287b16
- SHA1
  
  c0b3b34879d008ecbcd5b25b2940872336bc529b
- SHA256
  
  38a280fd17f5588830cbf4da894241d293caf677837d560cc8507a4bcaafa00c
- SHA512
  
  9cc3e035161c19283ab62ddae7456c831109040272ffc0f26df7c3e98896d9dcbdd1d994d0ce2d3be8de67e6c0f64a7c6d657e3faa46f9716f7c61d9e3b9112f
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy