Overview

overview

10

Static

static

3

0050-1.dll

windows7-x64

10

0050-1.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0050-1.dll.exe
  • Size 328KB
  • Sample231011-wtql9sff75
  • SHA256 a12045a6177dd32af8b39dea93fa92962ff1716381d0d137dede1fc75ecd2c0c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
icedid361893872bankercollectionspywarestealertrojan

Malware Config

Extracted

Family

  • icedid

Campaign

  • 361893872

Targets

    • Target
      0050-1.dll.exe
    • Size 328KB
    • SHA256 a12045a6177dd32af8b39dea93fa92962ff1716381d0d137dede1fc75ecd2c0c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    icedid361893872bankercollectionspywarestealertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks