Overview

overview

10

Static

static

2a6c086eed...f1.exe

windows7_x64

10

2a6c086eed...f1.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a6c086eed87e9665415439dd04fe1f1

  • Size

    739KB

  • Sample

    201117-wp956vh53e

  • MD5

    c9707dbdcc6712fc191e49b80f5eb46e

  • SHA1

    8e0128fa082d4e99e48ac1b1471c62381c2bb102

  • SHA256

    0e7712f12b37469d64c5876a163891c15fdf94b2795522d61111003e71050e0f

  • SHA512

    0f50052a7bf92a8993b9a2e9254f99db6c468d82adefde5acd9db7ea4f029ff5f40b3832031b90003129f4eb1c4144b66567c02f81698824cb977cc576f502f8

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      2a6c086eed87e9665415439dd04fe1f1

    • Size

      739KB

    • MD5

      c9707dbdcc6712fc191e49b80f5eb46e

    • SHA1

      8e0128fa082d4e99e48ac1b1471c62381c2bb102

    • SHA256

      0e7712f12b37469d64c5876a163891c15fdf94b2795522d61111003e71050e0f

    • SHA512

      0f50052a7bf92a8993b9a2e9254f99db6c468d82adefde5acd9db7ea4f029ff5f40b3832031b90003129f4eb1c4144b66567c02f81698824cb977cc576f502f8

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks