icedid | 9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2 | Triage

Submit
Reports

Overview

overview

Static

static

9d469a4a0f...e2.exe

windows7_x64

9d469a4a0f...e2.exe

windows10_x64

Sharing

General

Target

9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2
Size

667KB
Sample

201114-1tmyyfmblj
MD5

59f93787ec27a6cb7db86a0d7b345c2a
SHA1

0099c1410b56bc9861fce9c6df7ca06505ad0255
SHA256

9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2
SHA512

497e344b3eeca70a9aeb4eb5435ccf8634f5ac45e9e02b24e4196fa355f40e66a6681be57505ebab6c0cdc65ef242882f77fc295b7baeda231825ffba27b1ecf

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2.exe

Resource

win7v20201028

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2.exe

Resource

win10v20201028

icedid banker loader trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

- Target
  
  9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2
- Size
  
  667KB
- MD5
  
  59f93787ec27a6cb7db86a0d7b345c2a
- SHA1
  
  0099c1410b56bc9861fce9c6df7ca06505ad0255
- SHA256
  
  9d469a4a0f0878719e7f2677c8e98b4befc2a2948dce529a9ea9ec427b13cbe2
- SHA512
  
  497e344b3eeca70a9aeb4eb5435ccf8634f5ac45e9e02b24e4196fa355f40e66a6681be57505ebab6c0cdc65ef242882f77fc295b7baeda231825ffba27b1ecf
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy