Overview

overview

10

Static

static

3554d1fc8d...6a.dll

windows7-x64

10

3554d1fc8d...6a.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3554d1fc8ddb181e8a80575881e82586721d316a.bin
  • Size 240KB
  • Sample220825-rgacasebam
  • SHA256 ac769e6cf4a509a4f2afa6a8e30156f756885a52d9ee72d751483cb5761c0d52
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
icedid2106545440bankerloadertrojan

Malware Config

Extracted

Family

  • icedid

Campaign

  • 2106545440

C2

  • dullthingpur.com

Targets

    • Target
      3554d1fc8ddb181e8a80575881e82586721d316a.bin
    • Size 240KB
    • SHA256 ac769e6cf4a509a4f2afa6a8e30156f756885a52d9ee72d751483cb5761c0d52
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    icedid2106545440bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks