Overview

overview

10

Static

static

convolving.dll

windows7-x64

10

convolving.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    convolving.db

  • Size

    532KB

  • Sample

    220926-trvgbsbcf7

  • MD5

    148c8d4e6757f187fe2ebf2fac3d048b

  • SHA1

    a4ef0e39b1768b9b1bbc5738eaca6fb22f5036e0

  • SHA256

    768ae10d748df22e799a878c2bd5eebddd0cd331196d28e26b1a9b2e0ca989c2

  • SHA512

    a64b5ac532aca6aa3c61319645c00bee7b09509d7e9b17491bf838b5ee3c5dc0d9ce67a807f1f66663243cc1ed29054e26d05afdda79ff050928282b8ae0b2af

  • SSDEEP

    6144:U+86v2VKRnZEvCijwzDv35F5+Djwy/QCn5drokAieiV:U0v6vCij+3yB311

Score
10/10
icedid2537954433bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2537954433

C2

scainznorka.com

Targets

    • Target

      convolving.db

    • Size

      532KB

    • MD5

      148c8d4e6757f187fe2ebf2fac3d048b

    • SHA1

      a4ef0e39b1768b9b1bbc5738eaca6fb22f5036e0

    • SHA256

      768ae10d748df22e799a878c2bd5eebddd0cd331196d28e26b1a9b2e0ca989c2

    • SHA512

      a64b5ac532aca6aa3c61319645c00bee7b09509d7e9b17491bf838b5ee3c5dc0d9ce67a807f1f66663243cc1ed29054e26d05afdda79ff050928282b8ae0b2af

    • SSDEEP

      6144:U+86v2VKRnZEvCijwzDv35F5+Djwy/QCn5drokAieiV:U0v6vCij+3yB311

    Score
    10/10
    icedid2537954433bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks