Overview

overview

10

Static

static

81b4df61a5...50.dll

windows7_x64

10

81b4df61a5...50.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81b4df61a5dcace2ea7216abf8b05faae79c0b1ceea1d175a6b01166ee7e9b50

  • Size

    513KB

  • Sample

    220606-fz2nqaaear

  • MD5

    9debf3a4e98bc547bd55903f4a7b5b47

  • SHA1

    a0acf5a76a0b97fcb74fb0ff3cc25af55d0c3134

  • SHA256

    81b4df61a5dcace2ea7216abf8b05faae79c0b1ceea1d175a6b01166ee7e9b50

  • SHA512

    e41b51e3b17eeeb8cf960dbfab74e6fd1c0d130e67aaedf94729d46845f55190180977f5b00a66e3abf841038fa32a643ffec5ed17e1f743d029b0ed506bfa79

Score
10/10
icedid1501064257bankercore_loadertrojan

Malware Config

Extracted

Family

icedid

Botnet

1501064257

C2

ouldmakeithapp.top

meincarton.top

callbackhubs.com

eldingdayl.com

ganjicow.com

meanforthen.com
Attributes
  • auth_var

    7

  • url_path

    /news/

Targets

    • Target

      81b4df61a5dcace2ea7216abf8b05faae79c0b1ceea1d175a6b01166ee7e9b50

    • Size

      513KB

    • MD5

      9debf3a4e98bc547bd55903f4a7b5b47

    • SHA1

      a0acf5a76a0b97fcb74fb0ff3cc25af55d0c3134

    • SHA256

      81b4df61a5dcace2ea7216abf8b05faae79c0b1ceea1d175a6b01166ee7e9b50

    • SHA512

      e41b51e3b17eeeb8cf960dbfab74e6fd1c0d130e67aaedf94729d46845f55190180977f5b00a66e3abf841038fa32a643ffec5ed17e1f743d029b0ed506bfa79

    Score
    10/10
    icedid1501064257bankercore_loadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks