Overview

overview

10

Static

static

5901ea6a05...25.exe

windows7_x64

10

5901ea6a05...25.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5634791512899584.zip

  • Size

    125KB

  • Sample

    210726-evbrqk9l5s

  • MD5

    9a22ab2d9bd26d0e4d7bbf7ac56b14c3

  • SHA1

    548cab4de16f65030da4b89ea99b9a49fe67a473

  • SHA256

    d3fddc340951891f898b146b6bdc6a74e2a9879b63d414ba9bf21fef2c825efd

  • SHA512

    e010ee9158a73aa291fa1c11202a5a2eb5d91ea5951d94f8441317a0b0646469e2ae26570f70d546f78b986d59d88a48b0d324f3c892014e02722e9803efa7de

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

lookatnice.top

littyfahren.club

Targets

    • Target

      5901ea6a05e2a188d0cf47dcdff547fad95e49213d5abd4df6a53f8fe4cbbb25

    • Size

      301KB

    • MD5

      142ad6fd67491183aa6fd7dc2533060b

    • SHA1

      821c060e4ef4762a460119d68f6fedd3c5e488ee

    • SHA256

      5901ea6a05e2a188d0cf47dcdff547fad95e49213d5abd4df6a53f8fe4cbbb25

    • SHA512

      2ac1379cb009af4ddf0f37dc4e566d1ed1e64e5e6ca12a7bd05f98cb5d889838aa5f2ff5fa6f175413353a3f6e6634938d7ba56cc32d0833a2ee7a936b0bbec2

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks