Overview

overview

10

Static

static

71F1C8E85B...A3.dll

windows7_x64

10

71F1C8E85B...A3.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71F1C8E85B4187C34451AEA70125E7F21759D7E24ADA3.dll

  • Size

    396KB

  • Sample

    220529-t5g36agaa3

  • MD5

    47d8aebb46cc914d1eec5c4c917907f8

  • SHA1

    a0f4517f0ad6ffa3e759b7aac338ad901f5457f0

  • SHA256

    71f1c8e85b4187c34451aea70125e7f21759d7e24ada3f74c4d0e6df6d583e4b

  • SHA512

    f1adc18ed42b4a2282315e0dd23d933468626c164bcc48c93183a3353365a7e0258f3140fc0afa87cce9a38d845fa200db10e472ac7a6f44d84690ecc1274cba

Score
10/10
icedid4020654167bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

4020654167

C2

actuallycost.top

Targets

    • Target

      71F1C8E85B4187C34451AEA70125E7F21759D7E24ADA3.dll

    • Size

      396KB

    • MD5

      47d8aebb46cc914d1eec5c4c917907f8

    • SHA1

      a0f4517f0ad6ffa3e759b7aac338ad901f5457f0

    • SHA256

      71f1c8e85b4187c34451aea70125e7f21759d7e24ada3f74c4d0e6df6d583e4b

    • SHA512

      f1adc18ed42b4a2282315e0dd23d933468626c164bcc48c93183a3353365a7e0258f3140fc0afa87cce9a38d845fa200db10e472ac7a6f44d84690ecc1274cba

    Score
    10/10
    icedid4020654167bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks