Overview

overview

10

Static

static

6113cef14e...bf.dll

windows7-x64

10

6113cef14e...bf.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6113cef14eb9359f5bcb88ca66de2ebf.dll.exe

  • Size

    95KB

  • Sample

    221121-gqw8baad51

  • MD5

    6113cef14eb9359f5bcb88ca66de2ebf

  • SHA1

    7d6192459651cea74f60e236197433d12f6e85cb

  • SHA256

    63c927a5116fbe8d9b0a85bb5335d76788247fe32ffedd1e371771fbed1e1f1e

  • SHA512

    e6968ba619835d208eb412fdd1b8161058bf9466199acca6910a316cd58f9790b03516198861bd30664885c09dff54cffb9d9bc26e9edefe73e2b7f06848d2c7

  • SSDEEP

    1536:O2AcNPAIQPLRvToMTpU79Uz6aV1E9G40WbOKRbHG3lfXGv0dz119xV4W9hbnxzIP:1fvG9NTK9UzpCZ0W6MHGZJVxThbxzId9

Score
10/10
icedid1626240797bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1626240797

C2

aurasantisflork.com

Targets

    • Target

      6113cef14eb9359f5bcb88ca66de2ebf.dll.exe

    • Size

      95KB

    • MD5

      6113cef14eb9359f5bcb88ca66de2ebf

    • SHA1

      7d6192459651cea74f60e236197433d12f6e85cb

    • SHA256

      63c927a5116fbe8d9b0a85bb5335d76788247fe32ffedd1e371771fbed1e1f1e

    • SHA512

      e6968ba619835d208eb412fdd1b8161058bf9466199acca6910a316cd58f9790b03516198861bd30664885c09dff54cffb9d9bc26e9edefe73e2b7f06848d2c7

    • SSDEEP

      1536:O2AcNPAIQPLRvToMTpU79Uz6aV1E9G40WbOKRbHG3lfXGv0dz119xV4W9hbnxzIP:1fvG9NTK9UzpCZ0W6MHGZJVxThbxzId9

    Score
    10/10
    icedid1626240797bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks