Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d.dll

windows7-x64

10

d.dll

windows10-2004-x64

10

Resubmissions

04/08/2023, 02:06

230804-cjk49aab2t 10

04/08/2023, 02:05

230804-ch1hjsha28 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d.dll

  • Size

    527KB

  • Sample

    230804-cjk49aab2t

  • MD5

    60f8d1993043c054e0ddb91e11fc184f

  • SHA1

    80d274ff4278baff08418d48c647c8c0604db3ab

  • SHA256

    09a537a7c4bed33cfb33ae7d7b5360b52e6c1396a893b67b5e71acc28e3f74c2

  • SHA512

    007d9ed82a9cb612882afa70f9482d078f7612e913fd6f4b351307b37c5eaaededaf5b1a2aa1ba0a2ebc48888a475b168b5ea2ad3ef1c35a883daf8ece9f795b

  • SSDEEP

    12288:jymcE1WefvUdDpWcc/9scDp6MGuXxGSthFLEXCRF3MK:e6fvUdDp0/9sY6MGuFoCRF3MK

Score
10/10
icedid43832328bankerloaderpersistencetrojan

Malware Config

Extracted

Family

icedid

Campaign

43832328

C2

ospertoolsbo.com

Targets

    • Target

      d.dll

    • Size

      527KB

    • MD5

      60f8d1993043c054e0ddb91e11fc184f

    • SHA1

      80d274ff4278baff08418d48c647c8c0604db3ab

    • SHA256

      09a537a7c4bed33cfb33ae7d7b5360b52e6c1396a893b67b5e71acc28e3f74c2

    • SHA512

      007d9ed82a9cb612882afa70f9482d078f7612e913fd6f4b351307b37c5eaaededaf5b1a2aa1ba0a2ebc48888a475b168b5ea2ad3ef1c35a883daf8ece9f795b

    • SSDEEP

      12288:jymcE1WefvUdDpWcc/9scDp6MGuXxGSthFLEXCRF3MK:e6fvUdDp0/9sY6MGuFoCRF3MK

    Score
    10/10
    icedid43832328bankerloaderpersistencetrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Modifies Installed Components in the registry

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks