Overview

overview

10

Static

static

dridex

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7e9740829bdbeb57656b59c8295752a9e0b47a1fa193c09392170a6f368bb5f

  • Size

    534KB

  • Sample

    220707-vtvqjscdck

  • MD5

    690b0bf1346c97dfd5e1fe7e9eff22da

  • SHA1

    7f6af099f6eda199e240e525a070627c0598a55b

  • SHA256

    e7e9740829bdbeb57656b59c8295752a9e0b47a1fa193c09392170a6f368bb5f

  • SHA512

    acba2c9907be1cc4d76877294729c8bed71ca72dcec83fc1fb5fa0a5408a7d48372cc017ad59bd368dbe4c75ba28a243cd6b16d76d0005a7b1e66c64cd9e4bca

Score
10/10
icedid227378761bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

227378761

C2

blionarywesta.com

Targets

    • Target

      e7e9740829bdbeb57656b59c8295752a9e0b47a1fa193c09392170a6f368bb5f

    • Size

      534KB

    • MD5

      690b0bf1346c97dfd5e1fe7e9eff22da

    • SHA1

      7f6af099f6eda199e240e525a070627c0598a55b

    • SHA256

      e7e9740829bdbeb57656b59c8295752a9e0b47a1fa193c09392170a6f368bb5f

    • SHA512

      acba2c9907be1cc4d76877294729c8bed71ca72dcec83fc1fb5fa0a5408a7d48372cc017ad59bd368dbe4c75ba28a243cd6b16d76d0005a7b1e66c64cd9e4bca

    Score
    10/10
    icedid227378761bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks