Overview

overview

10

Static

static

00dd6aeb15...c6.dll

windows7_x64

10

00dd6aeb15...c6.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00dd6aeb15e617e9c1fab4eecaa847c6.dll

  • Size

    423KB

  • Sample

    220704-xlbzksagdl

  • MD5

    00dd6aeb15e617e9c1fab4eecaa847c6

  • SHA1

    80f60e0cfbf2926555a87623a448e4d7763d1acd

  • SHA256

    cb5a1e1bcfeb4beb9f4c6bbd47371c6e0463e51f687c29b22616f83abbe8042d

  • SHA512

    8572404141e2d3e3d40b0de6e80e949cfaba6d931ddeb40673dd7224d64914167ceebc5af8981d2d2c9cae881fb32f2e1f28aeb664a2e8af4f777de59805d03d

Score
10/10
icedid3635541348bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3635541348

C2

piponareatna.com

Targets

    • Target

      00dd6aeb15e617e9c1fab4eecaa847c6.dll

    • Size

      423KB

    • MD5

      00dd6aeb15e617e9c1fab4eecaa847c6

    • SHA1

      80f60e0cfbf2926555a87623a448e4d7763d1acd

    • SHA256

      cb5a1e1bcfeb4beb9f4c6bbd47371c6e0463e51f687c29b22616f83abbe8042d

    • SHA512

      8572404141e2d3e3d40b0de6e80e949cfaba6d931ddeb40673dd7224d64914167ceebc5af8981d2d2c9cae881fb32f2e1f28aeb664a2e8af4f777de59805d03d

    Score
    10/10
    icedid3635541348bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks