Overview

overview

10

Static

static

10

5567a8b4c3...cc.dll

windows7-x64

10

5567a8b4c3...cc.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5567a8b4c301e59a2d7823499402ed80a20c42f504ba87b7068b0cd74d2089cc.dll

  • Size

    13KB

  • Sample

    221219-qn1bmafb23

  • MD5

    e4b00d6a12bec39b9a60607c08e896ff

  • SHA1

    8e9ebb6042b9270866c794f3fa6b18477bd36263

  • SHA256

    5567a8b4c301e59a2d7823499402ed80a20c42f504ba87b7068b0cd74d2089cc

  • SHA512

    273e7970fa42637e18793bfc48a34027d4e13923f42ad74f03c9bc6feea7a5db09d77de3c1a0a86338d6236a22362c571b69b5cab09bd19d4df17bf8863eb152

  • SSDEEP

    384:J5Jxayczq7Yjt9lfle9s6PLaQ6kYGi8U:J5DHYeIlfle9HDNiX

Score
10/10
icedid1002085315bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1002085315

C2

klepdrafooip.com

Extracted

Family

icedid

Campaign

1002085315

Targets

    • Target

      5567a8b4c301e59a2d7823499402ed80a20c42f504ba87b7068b0cd74d2089cc.dll

    • Size

      13KB

    • MD5

      e4b00d6a12bec39b9a60607c08e896ff

    • SHA1

      8e9ebb6042b9270866c794f3fa6b18477bd36263

    • SHA256

      5567a8b4c301e59a2d7823499402ed80a20c42f504ba87b7068b0cd74d2089cc

    • SHA512

      273e7970fa42637e18793bfc48a34027d4e13923f42ad74f03c9bc6feea7a5db09d77de3c1a0a86338d6236a22362c571b69b5cab09bd19d4df17bf8863eb152

    • SSDEEP

      384:J5Jxayczq7Yjt9lfle9s6PLaQ6kYGi8U:J5DHYeIlfle9HDNiX

    Score
    10/10
    icedid1002085315bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks