Overview

overview

10

Static

static

4c35409a87...00.dll

windows7_x64

10

4c35409a87...00.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c35409a87a1f9eef0628245a5b87fa1782dc2c66061d0ec5c4b8690493b0a00

  • Size

    178KB

  • Sample

    220508-2p2fvscefr

  • MD5

    9bb918106053983c1c2c369202705c9c

  • SHA1

    df352d30ac755b362af741726370c7c32be4e205

  • SHA256

    4c35409a87a1f9eef0628245a5b87fa1782dc2c66061d0ec5c4b8690493b0a00

  • SHA512

    7a441de0467bc342ab655edb66b912f737189fef4ab7f655a3a8815163d2bc051caad5fba27dc097d68ba9043e8db68c0f07236b24d9347710d93c602d5cd945

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

qapoloki.cyou

Targets

    • Target

      4c35409a87a1f9eef0628245a5b87fa1782dc2c66061d0ec5c4b8690493b0a00

    • Size

      178KB

    • MD5

      9bb918106053983c1c2c369202705c9c

    • SHA1

      df352d30ac755b362af741726370c7c32be4e205

    • SHA256

      4c35409a87a1f9eef0628245a5b87fa1782dc2c66061d0ec5c4b8690493b0a00

    • SHA512

      7a441de0467bc342ab655edb66b912f737189fef4ab7f655a3a8815163d2bc051caad5fba27dc097d68ba9043e8db68c0f07236b24d9347710d93c602d5cd945

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks