icedid | 894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad | Triage

Submit
Reports

Overview

overview

Static

static

894bf073a8...ad.exe

windows7_x64

894bf073a8...ad.exe

windows10_x64

Sharing

General

Target

894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad
Size

701KB
Sample

201113-hm2523sdsx
MD5

a49a8d3d1098dfb6e1dc59007ab5082b
SHA1

300eaad0b4a7e042146912416d76db7436a622c0
SHA256

894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad
SHA512

6bec26bfcf2bdbd2d4aaee8995972495116a82dd6f0dad94b455895fda8050d9ce899f347b7a2b234255762f472efbf4bc5b0ec2d8d98853a9ee0367a81827ec

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad.exe

Resource

win7v20201028

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad.exe

Resource

win10v20201028

icedid banker loader trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

- Target
  
  894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad
- Size
  
  701KB
- MD5
  
  a49a8d3d1098dfb6e1dc59007ab5082b
- SHA1
  
  300eaad0b4a7e042146912416d76db7436a622c0
- SHA256
  
  894bf073a8ca2212e44e5d9a3c6cd38d7e7a974c94e5be9d528c4fb490def0ad
- SHA512
  
  6bec26bfcf2bdbd2d4aaee8995972495116a82dd6f0dad94b455895fda8050d9ce899f347b7a2b234255762f472efbf4bc5b0ec2d8d98853a9ee0367a81827ec
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy