icedid | b1566f9c7ffa839554b96575e2a34ea79416f03df75b5048f561e96808975555 | Triage

Sharing

General

Target

180000000.dll
Size

13KB
Sample

221226-yb2ypadf59
MD5

bdc362abb981e8aa18b4c19b41efec24
SHA1

d29b9c28636513071a169fc6dd293c21de890852
SHA256

b1566f9c7ffa839554b96575e2a34ea79416f03df75b5048f561e96808975555
SHA512

513aa43c84ba824b109f726b3caf5e67c4a9e05418761592fdb7724051bd4ad5228089d7ba998deee42012aa4a6124a4a2a3dfc06c3893253cabf481f7a440d9
SSDEEP

192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLSpP0tkYGijYt:s5Jxayczq7Yjt9lfle9s6PLSd6kYGi8

Score

10^/10

icedid 3146401099 banker loader trojan

Malware Config

Extracted

Family

icedid

Campaign

3146401099

C2

trbiriumpa.com

Extracted

Family

icedid

Campaign

3146401099

Targets

- Target
  
  180000000.dll
- Size
  
  13KB
- MD5
  
  bdc362abb981e8aa18b4c19b41efec24
- SHA1
  
  d29b9c28636513071a169fc6dd293c21de890852
- SHA256
  
  b1566f9c7ffa839554b96575e2a34ea79416f03df75b5048f561e96808975555
- SHA512
  
  513aa43c84ba824b109f726b3caf5e67c4a9e05418761592fdb7724051bd4ad5228089d7ba998deee42012aa4a6124a4a2a3dfc06c3893253cabf481f7a440d9
- SSDEEP
  
  192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLSpP0tkYGijYt:s5Jxayczq7Yjt9lfle9s6PLSd6kYGi8
Score

10^/10

icedid 3146401099 banker trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Blocklisted process makes network request
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

loader3146401099icedid

behavioral1

icedid3146401099bankertrojan