Overview

overview

10

Static

static

3

Malicious_...18.dll

windows7-x64

10

Malicious_...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Malicious_decf18d32f1e46adb5c876654103f544655fd531df99d7d99c76d07dd4cb1a18.exe

  • Size

    64KB

  • Sample

    230702-xwylbscg66

  • MD5

    d7e0392978f0079a3a905933767c7201

  • SHA1

    2de29f7ec76c25340a336b0ccd442263ee2bc12e

  • SHA256

    decf18d32f1e46adb5c876654103f544655fd531df99d7d99c76d07dd4cb1a18

  • SHA512

    fd7b6c63b6e3944842681b62e4acc12f7c81ef9d7066b38aac63443e8969d1abb5eb34a9a015550cd7b6544d6d1ecb04a9588ddb28852623f256171dc3a48a45

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Score
10/10
icedid2046050bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_decf18d32f1e46adb5c876654103f544655fd531df99d7d99c76d07dd4cb1a18.exe

    • Size

      64KB

    • MD5

      d7e0392978f0079a3a905933767c7201

    • SHA1

      2de29f7ec76c25340a336b0ccd442263ee2bc12e

    • SHA256

      decf18d32f1e46adb5c876654103f544655fd531df99d7d99c76d07dd4cb1a18

    • SHA512

      fd7b6c63b6e3944842681b62e4acc12f7c81ef9d7066b38aac63443e8969d1abb5eb34a9a015550cd7b6544d6d1ecb04a9588ddb28852623f256171dc3a48a45

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    Score
    10/10
    icedid2046050bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks