icedid | 8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d | Triage

Sharing

General

Target

8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d
Size

159KB
Sample

211201-vdy32ahbd8
MD5

1179fd19e9fa97eb607943ce9f3f1528
SHA1

d166ecc892afa5b75f40ce58ff91e29dc24408b9
SHA256

8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d
SHA512

a33c8b6c073dca360b73620839a33e74978eded8a917759d8f4661b3eff107ba88d1f4ab22ea2aff70c28c687d1f96d62dece61bb625de3c0615626d96663585

Score

10^/10

icedid 256587737 banker trojan

Malware Config

Extracted

Family

icedid

Botnet

256587737

C2

berrowernew.casa

gambitsniper.digital

desantogambito.agency

xantummassacre.golf

naturolinf.top

mikugivetonik.top

Attributes

auth_var
11
url_path
/news/

Targets

- Target
  
  8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d
- Size
  
  159KB
- MD5
  
  1179fd19e9fa97eb607943ce9f3f1528
- SHA1
  
  d166ecc892afa5b75f40ce58ff91e29dc24408b9
- SHA256
  
  8434de0f49c5c8455672393e728ae09c3e4e11742a9ad58cc36b2dffd0cba55d
- SHA512
  
  a33c8b6c073dca360b73620839a33e74978eded8a917759d8f4661b3eff107ba88d1f4ab22ea2aff70c28c687d1f96d62dece61bb625de3c0615626d96663585
Score

10^/10

icedid 256587737 banker trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid256587737bankertrojan

behavioral2

icedid256587737bankertrojan