Overview

overview

10

Static

static

9c0f49b481...d3.exe

windows7_x64

10

9c0f49b481...d3.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c0f49b48163abc96de821cc3166a2d3

  • Size

    734KB

  • Sample

    201117-m86fc49t3j

  • MD5

    e46cf65a152a11fa46a3bb9eded46c5e

  • SHA1

    dbec37427a38d6b91b474cefa7fca04c9912c0ba

  • SHA256

    a1d19e174b6d1e21d3d7ba65f5d3a33a21c904a3f2c174e4e24f671b3a093f82

  • SHA512

    d461108aa4b6269c88e387c0e569a45961bfff11b3a8df40f0cca7e3ef455d293fd42361dcc931133b9f4890d9ee27092a258a49e678ad3d770fbb34c236c669

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      9c0f49b48163abc96de821cc3166a2d3

    • Size

      734KB

    • MD5

      e46cf65a152a11fa46a3bb9eded46c5e

    • SHA1

      dbec37427a38d6b91b474cefa7fca04c9912c0ba

    • SHA256

      a1d19e174b6d1e21d3d7ba65f5d3a33a21c904a3f2c174e4e24f671b3a093f82

    • SHA512

      d461108aa4b6269c88e387c0e569a45961bfff11b3a8df40f0cca7e3ef455d293fd42361dcc931133b9f4890d9ee27092a258a49e678ad3d770fbb34c236c669

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks