Overview

overview

10

Static

static

1

excruciating.dll

windows7-x64

10

excruciating.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    excruciating.dat

  • Size

    167KB

  • Sample

    230329-hs54nsfb65

  • MD5

    a728f31de3f5c9e2a57696ceafb481fc

  • SHA1

    5f9024db8e28bb937f4290ebb173b07d70b48ca9

  • SHA256

    08f11f5a595573397fe6b5aa043cc34fb6f0e8496f8633bce60c2f69d422336b

  • SHA512

    e7084bfdcf680d1be3ed3fab7714af7c622bf585760ed76847dc3c11e0146fb25ef3abc5374c406b9fcf9a26acbdcaaf5d114a82db839ea98d5a3263c1262073

  • SSDEEP

    3072:xVBiJdZe7QFSGwMA8VMXGQC5iYIDqHBiCI2kpZ6LoysDbvB63:Bg2jMA8VMWlEOEZJjvB63

Score
10/10
icedid2245380894bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2245380894

C2

trakonicwe.com

Targets

    • Target

      excruciating.dat

    • Size

      167KB

    • MD5

      a728f31de3f5c9e2a57696ceafb481fc

    • SHA1

      5f9024db8e28bb937f4290ebb173b07d70b48ca9

    • SHA256

      08f11f5a595573397fe6b5aa043cc34fb6f0e8496f8633bce60c2f69d422336b

    • SHA512

      e7084bfdcf680d1be3ed3fab7714af7c622bf585760ed76847dc3c11e0146fb25ef3abc5374c406b9fcf9a26acbdcaaf5d114a82db839ea98d5a3263c1262073

    • SSDEEP

      3072:xVBiJdZe7QFSGwMA8VMXGQC5iYIDqHBiCI2kpZ6LoysDbvB63:Bg2jMA8VMWlEOEZJjvB63

    Score
    10/10
    icedid2245380894bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks