Overview

overview

10

Static

static

d84a270e2f...66.exe

windows7_x64

10

d84a270e2f...66.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d84a270e2f6dbcd223c121713afd69c2ad314ac35161d7486b55690517710266

  • Size

    681KB

  • Sample

    201113-1daeqek7gx

  • MD5

    8cee831dc69f8312e454fe1da77e4bd8

  • SHA1

    5087abb2bbe5dda77d0a8720fc4c68c78a912ba4

  • SHA256

    d84a270e2f6dbcd223c121713afd69c2ad314ac35161d7486b55690517710266

  • SHA512

    db0d96128cdf925ff2a3c6147dc148721e79c9ceafe55a9d559ccb75bdc41022e82f2ba20a687afab4f46e53d2375950c4133db061ece6359022fbf225488def

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      d84a270e2f6dbcd223c121713afd69c2ad314ac35161d7486b55690517710266

    • Size

      681KB

    • MD5

      8cee831dc69f8312e454fe1da77e4bd8

    • SHA1

      5087abb2bbe5dda77d0a8720fc4c68c78a912ba4

    • SHA256

      d84a270e2f6dbcd223c121713afd69c2ad314ac35161d7486b55690517710266

    • SHA512

      db0d96128cdf925ff2a3c6147dc148721e79c9ceafe55a9d559ccb75bdc41022e82f2ba20a687afab4f46e53d2375950c4133db061ece6359022fbf225488def

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks