Overview

overview

10

Static

static

abe866ba9e...03.exe

windows7_x64

10

abe866ba9e...03.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63692f8532a6b1c1e78c51d96842e7c90a841a9afe76c9d71beb2ca5bfc0bfa5.zip

  • Size

    135KB

  • Sample

    210726-rk7lajgj1a

  • MD5

    e90831897eb7208bb94d338392a4b4f1

  • SHA1

    e02a4af1d3af85f9d2764f922e8137fca372396a

  • SHA256

    d839633092f23135f03b4dd078f84533374710e9637d1edae89859362a2bdb9d

  • SHA512

    47ea98965a14903644beda1559f4f8b1ce8d5ab4c191892b65dc2ea0334ab839f0bc68f4741125cd15c71f9711d9a173327d4fed0b5fa5846869d30774ff82a3

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

kodjakskoda.club

financesromma.club

slobrewelo.pw

nifrittilo.pw

Targets

    • Target

      abe866ba9e8a9956a64ef4bc48ace783daa30d51b86fa60adfbb6d8fa044c503

    • Size

      240KB

    • MD5

      3fbcd911c5616182a5ced7f40fdfa28f

    • SHA1

      690e6e312df91174f1d13dce26c48abab7d74c96

    • SHA256

      abe866ba9e8a9956a64ef4bc48ace783daa30d51b86fa60adfbb6d8fa044c503

    • SHA512

      7dfd43197a4dc3770fb09d8979c3edb394cff72e0c4854ca1a2f98c05ae00e85854469c66327eb71facbf0099bec1a8880e041105c2ab455c0d1aec2541b1d0a

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks