Overview

overview

10

Static

static

089c2f986e...34.dll

windows7-x64

10

089c2f986e...34.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    089c2f986e5357eda1e4f40976ff61263a92d6de8c3e32a10c170031f3991e34

  • Size

    154KB

  • Sample

    220728-t9dxashdd2

  • MD5

    f943e05d781caa0abc4fe945b2634899

  • SHA1

    9e5b746cac6556149cf324cfcf46ec1aeb5d2251

  • SHA256

    089c2f986e5357eda1e4f40976ff61263a92d6de8c3e32a10c170031f3991e34

  • SHA512

    2db22d91f4c856ac17328e0b3ec26e1810be60b46de79e63ee31d53cee3fe55b08fe59d0d28b35ab4a6ff63d55b7397955da316200417097637e4ba0a90c3dcf

Score
10/10
icedid3524611504bankercore_loadertrojan

Malware Config

Extracted

Family

icedid

Botnet

3524611504

C2

wronigrabs.com

nokainptisarda.com
Attributes
  • auth_var

    10

  • url_path

    /news/

Targets

    • Target

      089c2f986e5357eda1e4f40976ff61263a92d6de8c3e32a10c170031f3991e34

    • Size

      154KB

    • MD5

      f943e05d781caa0abc4fe945b2634899

    • SHA1

      9e5b746cac6556149cf324cfcf46ec1aeb5d2251

    • SHA256

      089c2f986e5357eda1e4f40976ff61263a92d6de8c3e32a10c170031f3991e34

    • SHA512

      2db22d91f4c856ac17328e0b3ec26e1810be60b46de79e63ee31d53cee3fe55b08fe59d0d28b35ab4a6ff63d55b7397955da316200417097637e4ba0a90c3dcf

    Score
    10/10
    icedid3524611504bankercore_loadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks