Overview

overview

10

Static

static

142a372816...4f.dll

windows7_x64

10

142a372816...4f.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    142a3728163f77b549c0fc8d992f174f.dll

  • Size

    424KB

  • Sample

    220704-xe3tqaagbm

  • MD5

    142a3728163f77b549c0fc8d992f174f

  • SHA1

    b62cf796be55d8358a1f8084139416ac44e4200b

  • SHA256

    5c09475656153526e907694394641f8126d57176e8d4a4aecb52731c7136e630

  • SHA512

    557e9f0883138118f3ee5e19aa090e26abe1c80d73a9d791c9362093a9f6b52fe85e29009fd327bf143fee7d6579aa25bfa13614ab54a9b9f8cc872770f46ac4

Score
10/10
icedid3635541348bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3635541348

C2

piponareatna.com

Targets

    • Target

      142a3728163f77b549c0fc8d992f174f.dll

    • Size

      424KB

    • MD5

      142a3728163f77b549c0fc8d992f174f

    • SHA1

      b62cf796be55d8358a1f8084139416ac44e4200b

    • SHA256

      5c09475656153526e907694394641f8126d57176e8d4a4aecb52731c7136e630

    • SHA512

      557e9f0883138118f3ee5e19aa090e26abe1c80d73a9d791c9362093a9f6b52fe85e29009fd327bf143fee7d6579aa25bfa13614ab54a9b9f8cc872770f46ac4

    Score
    10/10
    icedid3635541348bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks