icedid | 750fc748fcfa7f614279f8ae58cf9abf5d47756aa1ade519904ef2b4f43cb1dc | Triage

Analysis

max time kernel
141s
max time network
142s
platform
windows10_x64
resource
win10v20201028
submitted
12-11-2020 14:20

Sharing

Report Analysis Logs

General

Target

750fc748fcfa7f614279f8ae58cf9abf5d47756aa1ade519904ef2b4f43cb1dc.exe
Size

325KB
MD5

737ba0633f950ceb6596ef365769244f
SHA1

d51791822bf074cf1c72efb14350dabd8ba88508
SHA256

750fc748fcfa7f614279f8ae58cf9abf5d47756aa1ade519904ef2b4f43cb1dc
SHA512

105fa87704d73c178f6d5c86ef36d89da6bf88cd3b90ae0e0ad0696bcbe0daa68435830d49f13324a616f0fb1d920f82dad4cc5de010acdf96f453a50a56b24e

Score

10^/10

icedid banker trojan

Malware Config

Signatures

IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
trojan banker icedid

IcedID Core Payload 1 IoCs

Processes:

resource	yara_rule
behavioral2/memory/636-0-0x0000000003240000-0x00000000032E6000-memory.dmp	Icedid_core

C:\Users\Admin\AppData\Local\Temp\750fc748fcfa7f614279f8ae58cf9abf5d47756aa1ade519904ef2b4f43cb1dc.exe
"C:\Users\Admin\AppData\Local\Temp\750fc748fcfa7f614279f8ae58cf9abf5d47756aa1ade519904ef2b4f43cb1dc.exe"
1⤵
PID:636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/636-0-0x0000000003240000-0x00000000032E6000-memory.dmp

Filesize
664KB

Download