Overview

overview

10

Static

static

core/cmd.bat

windows7_x64

10

core/cmd.bat

windows10_x64

10

core/genre-64.dat.dll

windows7_x64

1

core/genre-64.dat.dll

windows10_x64

1

Resubmissions

23/06/2021, 14:18

210623-fa6mx24cr210

08/06/2021, 15:18

210608-pctrrzna4n10

Sharing

Copy URL Twitter E-mail

General

  • Target
    core.zip
  • Size 349KB
  • Sample210623-fa6mx24cr2
  • SHA256 512b17c540c622e90879c8f382013187f6053a858381364367c258639b34b21e
  • MD5 SHA1 SHA512
Score
10/10
icedid987543880bankertrojan

Malware Config

Extracted

Family

  • icedid

rsa_pubkey.plain

Extracted

Family

  • icedid

Botnet

  • 987543880

C2

  • fimlubindu.top

  • vindurualeg.top

  • bigcostarikas.top

  • extrimefigim.top

Attributes
  • auth_var

    8

  • url_path

    /news/

Targets

    • Target
      core/cmd.bat
    • Size 188B
    • SHA256 68867aec1fd8a6eb416081c747705e847de95c033f5b38eb57ea575c69397210
    • MD5 SHA1 SHA512
    Score
    10/10
    icedid987543880bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Blocklisted process makes network request

    behavioral1behavioral2
    • Target
      core/genre-64.dat
    • Size 48KB
    • SHA256 039a59bfb6b07872a7bba707045f9639d029c2009b4c4297af1526cdaa07d479
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks