Overview

overview

10

Static

static

10

533c15177d...30.dll

windows7-x64

10

533c15177d...30.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30.dll

  • Size

    13KB

  • Sample

    221211-21vgpahh75

  • MD5

    c9868fc23a7d334c67d737edcfe9fcc5

  • SHA1

    fa3cc12178641cb083f824a3b4964c9c96aa3d98

  • SHA256

    533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30

  • SHA512

    2ce774f576dcd78587a893820f4d19aa92334b4d4c7fb0caf8f3c1c8c6f5542535ae6e6d7def7cf1a685f551c2d80d7521633166e950ecdbdacb22ef775a7337

  • SSDEEP

    384:J5Jxayczq7Yjt9lfle9s6PLtB4c6kYGi8:J5DHYeIlfle9HDt2Si

Score
10/10
icedid1441853872bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1441853872

C2

ewgahskoot.com

Extracted

Family

icedid

Campaign

1441853872

Targets

    • Target

      533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30.dll

    • Size

      13KB

    • MD5

      c9868fc23a7d334c67d737edcfe9fcc5

    • SHA1

      fa3cc12178641cb083f824a3b4964c9c96aa3d98

    • SHA256

      533c15177d35e0b7b5787913372a24e695e7002ef39baa548a1739b529022f30

    • SHA512

      2ce774f576dcd78587a893820f4d19aa92334b4d4c7fb0caf8f3c1c8c6f5542535ae6e6d7def7cf1a685f551c2d80d7521633166e950ecdbdacb22ef775a7337

    • SSDEEP

      384:J5Jxayczq7Yjt9lfle9s6PLtB4c6kYGi8:J5DHYeIlfle9HDt2Si

    Score
    10/10
    icedid1441853872bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks