Overview

overview

10

Static

static

Shadow

windows7_x64

10

Resubmissions

15-03-2021 17:20

210315-byxfckhc92 10

15-03-2021 17:08

210315-gs3bg6l69j 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44270.7082388889.dat

  • Size

    43KB

  • Sample

    210315-byxfckhc92

  • MD5

    5bf34d9fe5da5c093145b214738eabf3

  • SHA1

    e7df362314fbb4ab7ff24674a3d8b87b082a86ea

  • SHA256

    8e51ccc6c8d14f0365d2d597c8aaf6015238839c0dab90e419107782bf460414

  • SHA512

    5ed65b263c8088b1e7664c7a35b27c60d3ce76d33468ce4dc070c7a8151d76a153ee11b7089e66f426cc7b77d30d5c5fb4ac0655a988d223b1bdec5469768f1f

Score
10/10
icedid2811148672Photoloaderbankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2811148672

C2

asforthemines99.uno

Targets

    • Target

      44270.7082388889.dat

    • Size

      43KB

    • MD5

      5bf34d9fe5da5c093145b214738eabf3

    • SHA1

      e7df362314fbb4ab7ff24674a3d8b87b082a86ea

    • SHA256

      8e51ccc6c8d14f0365d2d597c8aaf6015238839c0dab90e419107782bf460414

    • SHA512

      5ed65b263c8088b1e7664c7a35b27c60d3ce76d33468ce4dc070c7a8151d76a153ee11b7089e66f426cc7b77d30d5c5fb4ac0655a988d223b1bdec5469768f1f

    Score
    10/10
    icedid2811148672Photoloaderbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

      Photoloader
    behavioral1

MITRE ATT&CK Matrix

Tasks