Overview

overview

10

Static

static

51069afe5b...9a.exe

windows7_x64

10

51069afe5b...9a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4564924521676800.zip

  • Size

    175KB

  • Sample

    211229-vc24asfah2

  • MD5

    be4674670ce9865de81f00768a8162d2

  • SHA1

    ae5dad710e9e075872419c2276252cbdc4bcd68e

  • SHA256

    a70d00932f6c3a2a6e630edb1949ddde4edfb997df314753c0ccfa6604d9c98f

  • SHA512

    ca6818fb3b43bd548a811a1aa08ee1df940dea2da6ca49879f1adbfda2cfa6b02ce28bf7aeeab362477814c2e1ff9ef6f6d2cc234907f0d54bb0260609e337c0

Score
10/10
icedid464168897bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

464168897

C2

demicdefinite.ink

Targets

    • Target

      51069afe5b2c62522b68911c1dcf5bc0a089a76bc193d05908faa60ba284109a

    • Size

      398KB

    • MD5

      9430f043ac5e73a47080c1dfbc4e829b

    • SHA1

      6dea51967ad0465286a63ed2885a332ec2addb15

    • SHA256

      51069afe5b2c62522b68911c1dcf5bc0a089a76bc193d05908faa60ba284109a

    • SHA512

      8491db08b94060ffc07873becf141e77667699c5c01cc35e4b492b4effe1e603fe55ede502be46e50c0803415f710c48ab9e70b6fbbacc103cc9a0fe960258a5

    Score
    10/10
    icedid464168897bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks