General
-
Target
file
-
Size
390KB
-
Sample
211130-y6kb5abee3
-
MD5
32c1f8752adcef72f6ed361e548cc582
-
SHA1
2c868c12ec69080c6f4f5bf304658334bc226c6d
-
SHA256
58f18afd96eedc9a76ba590375f46b712cf24e0447a31b9d8dc883df7bb17d41
-
SHA512
e0b4311a918b3e436929720cf03fb6d98f85b8c04118898bd695f3ce183bf73bcdeb705676272b0235629a4919b8da9b7869028a1e31259b1c952f1bf91cb6ca
Malware Config
Extracted
icedid
Extracted
icedid
1677997313
asrspoe.com
aviospe.com
-
auth_var
13
-
url_path
/news/
Targets
-
-
Target
core.bat
-
Size
182B
-
MD5
fb01059a6ceb572573dcce9e56cf7b3f
-
SHA1
616c09d25b078ee0fa77b5756cfddad68dc76612
-
SHA256
f62706ae776382ca1a5541374219f60fb3ef27999ea7fb9caf7561b6f674267d
-
SHA512
bac7cbcf8f457ce4a8bbf0f63845bbb0a98466624d411ee7cb04a3458cdaf63024910332220578ecd1b7996c013edb3a6cda20f877c0489ae856649cd440c0b3
Score10/10-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Blocklisted process makes network request
-
-
-
Target
hurt_32.tmp
-
Size
119KB
-
MD5
f49fdd97f0879f5b77612725b1ffa4d5
-
SHA1
4d752fbaf37ad0e71dbf9ce65b94efe64476f5a2
-
SHA256
86f9c5f9415bc631ca8867384496e58b00ec8d03fb45737c672574f512b5c8b9
-
SHA512
19bee9b73e94b223c290bd5c0c252a62c09ec9017eb11b03473a44803b6211f1f6c4a5eb3c164327c798ab4fbb135f78a76931f3ce4159090a25f589eb52600e
Score10/10-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-