Overview

overview

10

Static

static

out.dll

windows7-x64

10

out.dll

windows10-2004-x64

10

Resubmissions

11-11-2022 10:45

221111-mtckzaef52 10

11-11-2022 10:22

221111-mefzvahc6y 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    out.bin (2).zip

  • Size

    40KB

  • Sample

    221111-mefzvahc6y

  • MD5

    b64cd7a6334be9294fe9605a2765af79

  • SHA1

    842bb7a6d8d0c3db1315df34c51adcb3b41d0b0e

  • SHA256

    b26b19b6a7a75e675c1f3ecb49a98a80f42779e7fababf28cb9d379a394c9960

  • SHA512

    0eac66cbc9663530393c6c034062065e340b530ba93bc004feb0c7d36c42b432577f8044f5b21c41a4c77cd345b0594c7786eb22463051912868577cdae910d7

  • SSDEEP

    768:MxhkvMBMOmU26GfKfmfa/Usla9bY47q1WKB8cHejBBxsXHPSsOTkBiFxzS9:MMMBgXTfKL/tlTgqYKJUBeXxo49

Score
10/10
icedid3526094074bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3526094074

C2

scinetkoshir.com

Targets

    • Target

      out.bin

    • Size

      65KB

    • MD5

      b2c4cd82c628d4b71cabe53fad55ae19

    • SHA1

      1a23e6cde426240bbf9ac7e3c611e21e0910b516

    • SHA256

      99fd0558abc190ddf332172b6ca31c432eaa00a52d3c7be228656472e53a9cd7

    • SHA512

      3ae826d85af91799e06b2c9cedb1ffad3a03272197c3e3d584f789803c8af1e931fe11eff1b7e80b288ff79b7dc32896a3ec9ac69d2d13e3a83bdb848aaad716

    • SSDEEP

      1536:92oYJqQ4eoLjTipZrS5oX4vWGCgOoi/17IvLiVps:woqXofupZm5TCgWxaCp

    Score
    10/10
    icedid3526094074bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks