Overview

overview

10

Static

static

6557f5eecf...7a.dll

windows7_x64

10

6557f5eecf...7a.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7418346177.zip

  • Size

    388KB

  • Sample

    220504-vjdz2sece5

  • MD5

    54b6eb61044b3138138b62f60b09af2f

  • SHA1

    54b1fe033861eb575bf3e10cd697e04eefaf2bee

  • SHA256

    2ecf3ed1f75c98cf8732278c4078e6cbb47c4df9f43d6e1f893c96b4018676d7

  • SHA512

    992fd431a93ea326a62026fdbb7162d06a2213a46fada65eabb6046968a4bdbeb4ce7396fc879c847b0cbd7f8ed88c4abae4f614956eae761755aab0485ed44a

Score
10/10
icedid3467965077bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      6557f5eecf1df5c7835d2ed88f99b52503873c6307b946b15d81a1e5a885c87a

    • Size

      490KB

    • MD5

      ccc7f68d2dbd6801dde30ff57e5c0c2b

    • SHA1

      3899e2803ec9666b17684d1cd42931bb55a8f9e1

    • SHA256

      6557f5eecf1df5c7835d2ed88f99b52503873c6307b946b15d81a1e5a885c87a

    • SHA512

      26c47fec58849d42b107ee9ba7c1b3326aee5339d3865e1d795dff596dc4a1458a480d4dd884306a4e884ef033240c6269cad4461d283cfb9a5bf2d703ce234f

    Score
    10/10
    icedid3467965077bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks