Overview

overview

10

Static

static

7b3ab952b5...1d.dll

windows7_x64

10

7b3ab952b5...1d.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b3ab952b5f6059b3ccdc726d1e1f41d.dll

  • Size

    815KB

  • Sample

    220711-1qgbmsdagm

  • MD5

    7b3ab952b5f6059b3ccdc726d1e1f41d

  • SHA1

    0303437032871377a6dba09069ed04daa7b44056

  • SHA256

    8319040f5b0ed5ae1708d0981729b3f64d3fff6fbdc5bd198041b5bf3233a21a

  • SHA512

    bf1f1707e07c0e9ec6d4d4bf5a98a53006177bd4286e9ef2807cebca935e9f4834b36a1cf150d672546d0f026f2dd6dbceca6e23625baa71cd185b15da4a164e

Score
10/10
icedid4105767744bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

4105767744

C2

frodupshopping.com

Targets

    • Target

      7b3ab952b5f6059b3ccdc726d1e1f41d.dll

    • Size

      815KB

    • MD5

      7b3ab952b5f6059b3ccdc726d1e1f41d

    • SHA1

      0303437032871377a6dba09069ed04daa7b44056

    • SHA256

      8319040f5b0ed5ae1708d0981729b3f64d3fff6fbdc5bd198041b5bf3233a21a

    • SHA512

      bf1f1707e07c0e9ec6d4d4bf5a98a53006177bd4286e9ef2807cebca935e9f4834b36a1cf150d672546d0f026f2dd6dbceca6e23625baa71cd185b15da4a164e

    Score
    10/10
    icedid4105767744bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks