Overview

overview

10

Static

static

81267b1f7b...55.dll

windows7_x64

10

Resubmissions

31-05-2022 13:41

220531-qy5zvsbch6 10

30-05-2022 15:37

220530-s2wxgaacg8 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7506406173.zip

  • Size

    197KB

  • Sample

    220531-qy5zvsbch6

  • MD5

    1a0560b885dc3d9388fc9d1f8d14e28c

  • SHA1

    cbdcf5781b3a3d0d8791be183f91799fee52bef0

  • SHA256

    43ea2aa7f4415b812b5ee19642d27640e4bc49f4bf7f092f74a7b2bf6cb61898

  • SHA512

    1fb8bb1bc85996fcdb230695fccd33cacc83b043def1a13b0e701ca6d5dd24ae948a52d3b141288657b4e03b3931a7d5c46253ef9b6f41a2922bcd45b2a3a992

Score
10/10
icedid1501064257bankercore_loadertrojan

Malware Config

Extracted

Family

icedid

Botnet

1501064257

C2

ouldmakeithapp.top

meincarton.top

callbackhubs.com

eldingdayl.com

ganjicow.com

meanforthen.com
Attributes
  • auth_var

    13

  • url_path

    /news/

Targets

    • Target

      81267b1f7bf58bd9e999083ccc6681cd62be16b81d3e5d2486ce8d150239c455

    • Size

      372KB

    • MD5

      0137e3896f7d805fe348f42137cee9af

    • SHA1

      c642729dc5714595c5eba585b48b899d2a1ddc43

    • SHA256

      81267b1f7bf58bd9e999083ccc6681cd62be16b81d3e5d2486ce8d150239c455

    • SHA512

      d9710614b484e5a6ca8029dc31aa119f4843d8d69bbb1f9a4eb70d37906381732881a96657551cc96f329e9ed8d221dbf08335f6bc80d4333ffdab9696c6b1ca

    Score
    10/10
    icedid1501064257bankercore_loadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1

MITRE ATT&CK Matrix

Tasks