Overview

overview

10

Static

static

WIN7(10)

windows7_x64

10

Resubmissions

12-03-2021 18:16

210312-nsgw77l492 10

11-03-2021 19:06

210311-4sm8tmbt2x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f813c14c50fe621283850b968b386d0cf4031cd3c6a110af6cdb7dcb9e699101.exe

  • Size

    153KB

  • Sample

    210312-nsgw77l492

  • MD5

    a803c35fd7de84f8c5a3c0143e4afd84

  • SHA1

    9e9334fadb40fe49e2f9ddba6604df78eb9d8f3a

  • SHA256

    f813c14c50fe621283850b968b386d0cf4031cd3c6a110af6cdb7dcb9e699101

  • SHA512

    3313bb47924a1afc82a947d55972e20caa33bcd096572bab6158682e8a3ee6c1878a1fd785fbc1e3a40b14a64e40a96ee3d32e3b078bbbf32a9f15fab3de579c

Score
10/10
icedid162205677Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

162205677

C2

klicka2.online

Targets

    • Target

      f813c14c50fe621283850b968b386d0cf4031cd3c6a110af6cdb7dcb9e699101.exe

    • Size

      153KB

    • MD5

      a803c35fd7de84f8c5a3c0143e4afd84

    • SHA1

      9e9334fadb40fe49e2f9ddba6604df78eb9d8f3a

    • SHA256

      f813c14c50fe621283850b968b386d0cf4031cd3c6a110af6cdb7dcb9e699101

    • SHA512

      3313bb47924a1afc82a947d55972e20caa33bcd096572bab6158682e8a3ee6c1878a1fd785fbc1e3a40b14a64e40a96ee3d32e3b078bbbf32a9f15fab3de579c

    Score
    10/10
    icedid162205677Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1

MITRE ATT&CK Matrix

Tasks