Overview

overview

10

Static

static

WIN10(30)

windows10_x64

10

Resubmissions

09-03-2021 16:50

210309-v9yj65x5ja 10

09-03-2021 16:25

210309-t9rdq5ysya 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    541.jpg

  • Size

    148KB

  • Sample

    210309-v9yj65x5ja

  • MD5

    6df4651ac1ac59c9984fe9fde4e18c8c

  • SHA1

    5f57f886ad49d3b46387ea78041bf75716b866de

  • SHA256

    4bdaf91cd5f18f8acee4b05c0e1a5966e8e04ac5c697eaf3ef59e3c113a1066f

  • SHA512

    f802f91ae927f84f7807d135facb8c20799bcf1c554bf30d37d2141f8276a7fe5e56bf81843960a6fca63c6120581ac6edafcd8e9d59b17ad7f0a13f2b360b85

Score
10/10
icedid81593223Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

81593223

C2

fekiop3.space

Targets

    • Target

      541.jpg

    • Size

      148KB

    • MD5

      6df4651ac1ac59c9984fe9fde4e18c8c

    • SHA1

      5f57f886ad49d3b46387ea78041bf75716b866de

    • SHA256

      4bdaf91cd5f18f8acee4b05c0e1a5966e8e04ac5c697eaf3ef59e3c113a1066f

    • SHA512

      f802f91ae927f84f7807d135facb8c20799bcf1c554bf30d37d2141f8276a7fe5e56bf81843960a6fca63c6120581ac6edafcd8e9d59b17ad7f0a13f2b360b85

    Score
    10/10
    icedid81593223Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1

MITRE ATT&CK Matrix

Tasks