Overview

overview

10

Static

static

b3c51a43fd...02.dll

windows7-x64

10

b3c51a43fd...02.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3c51a43fdbcc5ee34fb4c74b85b2102.dll.exe

  • Size

    672KB

  • Sample

    221004-tj267sbdg9

  • MD5

    b3c51a43fdbcc5ee34fb4c74b85b2102

  • SHA1

    3543d9e4fa5c82491ac11d44e2f526f9754ba5e4

  • SHA256

    04459dfeff8017b98b1595de3adc08078d826e2f1d8b046056655974acd22147

  • SHA512

    8fc36775a24ff4c4a203f32e48c783a5bab8ec1dbae69c02e2eefd57e7a9711ad0378e1b97b84a745bcf1f0b49fc294ed87ec815939207c9298a9d73eddedcde

  • SSDEEP

    12288:HWET+ldw5wwwZw2AwylWidajwGw1ddXBZ+w4wHQfoAl7pfHw8r7qiUw+X:aonzmoSfk

Score
10/10
icedid2399258081bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2399258081

C2

eysneolissionsm.com

Targets

    • Target

      b3c51a43fdbcc5ee34fb4c74b85b2102.dll.exe

    • Size

      672KB

    • MD5

      b3c51a43fdbcc5ee34fb4c74b85b2102

    • SHA1

      3543d9e4fa5c82491ac11d44e2f526f9754ba5e4

    • SHA256

      04459dfeff8017b98b1595de3adc08078d826e2f1d8b046056655974acd22147

    • SHA512

      8fc36775a24ff4c4a203f32e48c783a5bab8ec1dbae69c02e2eefd57e7a9711ad0378e1b97b84a745bcf1f0b49fc294ed87ec815939207c9298a9d73eddedcde

    • SSDEEP

      12288:HWET+ldw5wwwZw2AwylWidajwGw1ddXBZ+w4wHQfoAl7pfHw8r7qiUw+X:aonzmoSfk

    Score
    10/10
    icedid2399258081bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks