Overview

overview

10

Static

static

d19a3c5e5a...05.dll

windows7-x64

10

d19a3c5e5a...05.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d19a3c5e5a8c32fff482b5ed580e0605.dll
  • Size 96KB
  • Sample220724-mkdfxacff4
  • SHA256 b8c8634260fa5a52b096b8000b0374f79bee1529e4aa3acc9a56618feb2f75df
  • MD5 SHA1 SHA512
Score
10/10
icedid2937671378bankerloadertrojan

Malware Config

Extracted

Family

  • icedid

Campaign

  • 2937671378

C2

  • cootembrast.com

Targets

    • Target
      d19a3c5e5a8c32fff482b5ed580e0605.dll
    • Size 96KB
    • SHA256 b8c8634260fa5a52b096b8000b0374f79bee1529e4aa3acc9a56618feb2f75df
    • MD5 SHA1 SHA512
    Score
    10/10
    icedid2937671378bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks