Overview

overview

10

Static

static

70a77cba55...88.dll

windows7_x64

10

70a77cba55...88.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70a77cba551b3da99055b9fa3ae13b88.dll

  • Size

    815KB

  • Sample

    220711-zxqm8acgbm

  • MD5

    70a77cba551b3da99055b9fa3ae13b88

  • SHA1

    688586d80c1b2eebfc0717dd050b6c49d9a33bd6

  • SHA256

    1ffe7ef56875c38cc32cfb61572096c83cfdae2d9014020c098c69d772c581df

  • SHA512

    a53745daa132353ea7c1ae17b501b62732860985ba4b7670af40a8f34fd01bb1b7c895864142d0c2c3964acce5be34c6dc8b134ce8d3371b70719f8c9f03d64e

Score
10/10
icedid4105767744bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

4105767744

C2

frodupshopping.com

Targets

    • Target

      70a77cba551b3da99055b9fa3ae13b88.dll

    • Size

      815KB

    • MD5

      70a77cba551b3da99055b9fa3ae13b88

    • SHA1

      688586d80c1b2eebfc0717dd050b6c49d9a33bd6

    • SHA256

      1ffe7ef56875c38cc32cfb61572096c83cfdae2d9014020c098c69d772c581df

    • SHA512

      a53745daa132353ea7c1ae17b501b62732860985ba4b7670af40a8f34fd01bb1b7c895864142d0c2c3964acce5be34c6dc8b134ce8d3371b70719f8c9f03d64e

    Score
    10/10
    icedid4105767744bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks