Overview

overview

10

Static

static

12f604ac00...78.dll

windows7_x64

10

12f604ac00...78.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12f604ac005f97198dead706a057d693ffd158e8349241b82be0918068bb3178

  • Size

    224KB

  • Sample

    220524-3dch2abea6

  • MD5

    ff66e4e89f2d839d81f8b6c7ff5923c4

  • SHA1

    8e85db0775dc9966cc947c0e45346d713ccf9446

  • SHA256

    12f604ac005f97198dead706a057d693ffd158e8349241b82be0918068bb3178

  • SHA512

    cb9ff56cd218bc79babae29a13f6ef6be9a71bed778997fca3479ce520799e9834b2f71d8316adbd8ea568be0f72757260370e5e9b853640a2a5a5bbb936dca7

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

loadberlin.casa

Targets

    • Target

      12f604ac005f97198dead706a057d693ffd158e8349241b82be0918068bb3178

    • Size

      224KB

    • MD5

      ff66e4e89f2d839d81f8b6c7ff5923c4

    • SHA1

      8e85db0775dc9966cc947c0e45346d713ccf9446

    • SHA256

      12f604ac005f97198dead706a057d693ffd158e8349241b82be0918068bb3178

    • SHA512

      cb9ff56cd218bc79babae29a13f6ef6be9a71bed778997fca3479ce520799e9834b2f71d8316adbd8ea568be0f72757260370e5e9b853640a2a5a5bbb936dca7

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks