Overview

overview

10

Static

static

3

hey/superstring.dll

windows7-x64

10

hey/superstring.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    s.zip.zip

  • Size

    109KB

  • Sample

    240309-ztb1naac23

  • MD5

    f38428e8ba0c4d1c0c7a5d0cfa78c25c

  • SHA1

    3ad008936d12e4aab3cb8481ed6898d98f03ab97

  • SHA256

    fed94556d81622a39c4bfbaf39fa11dcab6a9b63fc487e037ccb1771f92ea894

  • SHA512

    b43a91ff8680bea849987a6969da41155f4ea3efc8d57d7592135a2c48b874203e8a21053d4607487e6a523d72926c5bca8c569951a3308802b3a743a4dd48d6

  • SSDEEP

    3072:7X21vskWriCiMb8UA0gRP8DuRCWxfGxOskz5PQokcQV0T:7X2Bsk28Y8UA08OuTxexOgL2T

Score
10/10
icedid612758225bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

612758225

C2

pildofraften.com

Targets

    • Target

      hey/superstring.dll

    • Size

      728KB

    • MD5

      293b6dc3360e7be05e35e28cc4201e47

    • SHA1

      7d2877e3eedd5b8d366b2fe44a117a9111c3d30a

    • SHA256

      645e011080488d4f5c14d217f5571372e7939c50a3568021cf9d434cf6f5f439

    • SHA512

      fb9222361b530d8a279a8e1a6342b3f71f4de9674e1f904608a86e43b6641e07a8afcfd77df0ec4c7d8f4801b408fe10be20a8cc29b3f972287ff948674c881d

    • SSDEEP

      12288:ciHw0sbzwD4FwpH5qCwfwM+A5n5RwUwjwEQwJw+wXcdwnTwuwJwxewGw90wHwMwd:cVi

    Score
    10/10
    icedid612758225bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks