Overview

overview

10

Static

static

ec9b2eaa7b...9e.dll

windows7_x64

10

ec9b2eaa7b...9e.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec9b2eaa7b73e67019ab5de9ac76dd289232890fa905c3222f98827dafff779e

  • Size

    178KB

  • Sample

    220508-2pz8sshga8

  • MD5

    b7d704ebd54a6999619609243f7b5abe

  • SHA1

    6275e2c5a16de5bd601a683b53d49bac674590f5

  • SHA256

    ec9b2eaa7b73e67019ab5de9ac76dd289232890fa905c3222f98827dafff779e

  • SHA512

    7a0076d14ce69f7264bc57de6740bf3e3b41339b20aecc094ac2e76e6e124eaea55550319e7bdca77c4256b3ea554507549132dfec24eb850a80520b11594374

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

qapoloki.cyou

Targets

    • Target

      ec9b2eaa7b73e67019ab5de9ac76dd289232890fa905c3222f98827dafff779e

    • Size

      178KB

    • MD5

      b7d704ebd54a6999619609243f7b5abe

    • SHA1

      6275e2c5a16de5bd601a683b53d49bac674590f5

    • SHA256

      ec9b2eaa7b73e67019ab5de9ac76dd289232890fa905c3222f98827dafff779e

    • SHA512

      7a0076d14ce69f7264bc57de6740bf3e3b41339b20aecc094ac2e76e6e124eaea55550319e7bdca77c4256b3ea554507549132dfec24eb850a80520b11594374

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks