Overview

overview

10

Static

static

y2D0B.tmp.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    y2D0B.tmp.dll

  • Size

    352KB

  • Sample

    220817-tzremsaadp

  • MD5

    a199abb4e2297ad76b4fae8f84d78f97

  • SHA1

    4c02d79a7fd2540098c8866066be306393368d91

  • SHA256

    9cb147d008d7edd6829bd80f163d0bc5ae5063ca75b9e6c020d40398acf0701f

  • SHA512

    7231e7448785e40f4ce4bedf7a51a6e622cf28e92020928bac4f2202883bd51f5e12e96e8db0b06133d2a068b7bdd27a95aaba6404288d7b394209b3c60af2c6

  • SSDEEP

    6144:UYCYa6MfAcSlE+S0fzAMJfWpKd5WhAl7CJDZ/PeHbUhHTmGPqG7s6FmlEHKiTd:bCwMfjSlE+A4eguRJDtPZIG46FkEH9

Score
10/10
icedid3570055661bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3570055661

C2

alexbionka.com

Targets

    • Target

      y2D0B.tmp.dll

    • Size

      352KB

    • MD5

      a199abb4e2297ad76b4fae8f84d78f97

    • SHA1

      4c02d79a7fd2540098c8866066be306393368d91

    • SHA256

      9cb147d008d7edd6829bd80f163d0bc5ae5063ca75b9e6c020d40398acf0701f

    • SHA512

      7231e7448785e40f4ce4bedf7a51a6e622cf28e92020928bac4f2202883bd51f5e12e96e8db0b06133d2a068b7bdd27a95aaba6404288d7b394209b3c60af2c6

    • SSDEEP

      6144:UYCYa6MfAcSlE+S0fzAMJfWpKd5WhAl7CJDZ/PeHbUhHTmGPqG7s6FmlEHKiTd:bCwMfjSlE+A4eguRJDtPZIG46FkEH9

    Score
    10/10
    icedid3570055661bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks