Overview

overview

10

Static

static

8aed42b1e1...2a.exe

windows7_x64

10

8aed42b1e1...2a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8aed42b1e1f541c627056598d2ab96ffb0ddc90909c512743d347666dbc2122a

  • Size

    728KB

  • Sample

    201113-lz2z3r8ftx

  • MD5

    8f1ad26698608583fed4088cf681e604

  • SHA1

    d539566315213fbb51bffb13980e6e291a58fc8c

  • SHA256

    8aed42b1e1f541c627056598d2ab96ffb0ddc90909c512743d347666dbc2122a

  • SHA512

    7964575dcf9d2ae4ee20ee5bcfaf8e19529289e600a068e10c9037fc315667a04767e5919abb0e612c719f3b06c8d453adb213161fbcef60b3bfb567f4043282

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      8aed42b1e1f541c627056598d2ab96ffb0ddc90909c512743d347666dbc2122a

    • Size

      728KB

    • MD5

      8f1ad26698608583fed4088cf681e604

    • SHA1

      d539566315213fbb51bffb13980e6e291a58fc8c

    • SHA256

      8aed42b1e1f541c627056598d2ab96ffb0ddc90909c512743d347666dbc2122a

    • SHA512

      7964575dcf9d2ae4ee20ee5bcfaf8e19529289e600a068e10c9037fc315667a04767e5919abb0e612c719f3b06c8d453adb213161fbcef60b3bfb567f4043282

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks