Overview

overview

10

Static

static

3adc9ed342...a4.exe

windows7_x64

10

3adc9ed342...a4.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3adc9ed342231807a1f3280fb540afa4

  • Size

    725KB

  • Sample

    201117-1vewl8ksmx

  • MD5

    11768af8d86d10d66fa712d2ab7a6746

  • SHA1

    0fdb9c39d18a8518007a47104613aacc0eafbbeb

  • SHA256

    3c5a7fcaffea0a07016fce2f047efa8ff55dc38d0c59fe06877a92457e4cc30d

  • SHA512

    42b4573399946b17a173bfb69b9c747dddbc2bfeaeb2611afef2a225e9918609b6ab1d353c0422c893ec8a1515bd3e0a8ab86cdf667bfa35fe29e6fd4a410a6c

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      3adc9ed342231807a1f3280fb540afa4

    • Size

      725KB

    • MD5

      11768af8d86d10d66fa712d2ab7a6746

    • SHA1

      0fdb9c39d18a8518007a47104613aacc0eafbbeb

    • SHA256

      3c5a7fcaffea0a07016fce2f047efa8ff55dc38d0c59fe06877a92457e4cc30d

    • SHA512

      42b4573399946b17a173bfb69b9c747dddbc2bfeaeb2611afef2a225e9918609b6ab1d353c0422c893ec8a1515bd3e0a8ab86cdf667bfa35fe29e6fd4a410a6c

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks