Overview

overview

10

Static

static

dissecting.db.dll

windows7-x64

10

dissecting.db.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dissecting.db.dll

  • Size

    317KB

  • Sample

    220926-bebvcaggd5

  • MD5

    87c9e8f8a6acc60449903ba6348e7f16

  • SHA1

    70a71a0fe6e24d3f92598963cc97831e0d9e0e5e

  • SHA256

    a5581683160ce5d8e1e45b78e28538dbf7a6cc14de0a38bcc7ff441e50574245

  • SHA512

    ab917d8e6cf76b833bda80b9a51113ab6de0dfccd8ff0a7cbd4c2ed50b6a32aebb0fc752ffd1e00613c50c90b1d0a671d3c946481902b16d364b7bf48c055f9b

  • SSDEEP

    6144:OaA2m2kP7+sOjcroyI0xwlh8boidmQp1tRdnjU8bq:O92/kP7yj1kuvcU8e

Score
10/10
icedid1023645195bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      dissecting.db.dll

    • Size

      317KB

    • MD5

      87c9e8f8a6acc60449903ba6348e7f16

    • SHA1

      70a71a0fe6e24d3f92598963cc97831e0d9e0e5e

    • SHA256

      a5581683160ce5d8e1e45b78e28538dbf7a6cc14de0a38bcc7ff441e50574245

    • SHA512

      ab917d8e6cf76b833bda80b9a51113ab6de0dfccd8ff0a7cbd4c2ed50b6a32aebb0fc752ffd1e00613c50c90b1d0a671d3c946481902b16d364b7bf48c055f9b

    • SSDEEP

      6144:OaA2m2kP7+sOjcroyI0xwlh8boidmQp1tRdnjU8bq:O92/kP7yj1kuvcU8e

    Score
    10/10
    icedid1023645195bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks