Overview

overview

10

Static

static

9944404c61...61.exe

windows7_x64

10

9944404c61...61.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9944404c61248373a7856f5293d89af8fde2e5cf968b394bebaa84fed6d6fe61.zip

  • Size

    169KB

  • Sample

    210721-xdflayz2ka

  • MD5

    bd522d15d480fb8494a73f3b12f5937d

  • SHA1

    da8f37e41f85a9dcdf46b6ac617c1f0f0c4dc705

  • SHA256

    6807e1da7333ede82456a91ede2b3feabe70d967883eb9753b7d823bee241198

  • SHA512

    e1460d817d47989cc11b965d823d699f0f407c956d30b769c00f00bca7ad76b837ac49acac0caac066737d045f7e3ab1f96227cf19fafee4f389fa2bc3d2eea8

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

fillerwinner.best

fleightfreight.best

chinatrades.best

hongcontrol.best

Targets

    • Target

      9944404c61248373a7856f5293d89af8fde2e5cf968b394bebaa84fed6d6fe61

    • Size

      323KB

    • MD5

      3faec30bdd89e0b3ae2f6bee7150141e

    • SHA1

      ec56188a3a8b46e0e6575f32bd175aade9cbd572

    • SHA256

      9944404c61248373a7856f5293d89af8fde2e5cf968b394bebaa84fed6d6fe61

    • SHA512

      61eff05915699e5df4f200fdb0b9acbf6c275b95f41c0f2ad40e62d0b2080e7c1b3ec1c7a64be0629bddfc2ddacdddc2f4f5e43c405f1f283937929c5101fd80

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks