icedid | 9aa8a2e20b6d56d65e0448d0959db9870f0c35f1c8491928b14a3487c2f4e047 | Triage™

Login
Reports

Overview

overview

Static

static

61f93040cdcf0.dll

windows7_x64

61f93040cdcf0.dll

windows10-2004_x64

8

Sharing

Copy URL Twitter E-mail

General

Target
61f93040cdcf0.rar
Size 578KB
Sample220201-sdz9zsgfb2
SHA256 9aa8a2e20b6d56d65e0448d0959db9870f0c35f1c8491928b14a3487c2f4e047
MD5 1e849e7feab8fe932068d531bf5809c5
SHA1 b82811f860b8d1fea29b824abf22a58a03d60ecb
SHA512 62dc889a0bc0317a62c8298acf1b37a3800a21fef4950a1b58350ef1b808b4780603008a7ea60f4c758b42bd848ce9406d62213479ba87cfe2e2364ec9f96846
MD5 SHA1 SHA512

Score

10^/10

icedid 2607846789 banker persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

61f93040cdcf0.dll

Resource

win7-en-20211208

windows7_x64

0 signatures

0 seconds

icedid 2607846789 banker trojan

Behavioral task

behavioral2

Sample

61f93040cdcf0.dll

Resource

win10v2004-en-20220113

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

Campaign

2607846789

C2

cleverballs.com

Targets

- Target
  61f93040cdcf0.rar
- Size 578KB
- SHA256 9aa8a2e20b6d56d65e0448d0959db9870f0c35f1c8491928b14a3487c2f4e047
- MD5 1e849e7feab8fe932068d531bf5809c5
- SHA1 b82811f860b8d1fea29b824abf22a58a03d60ecb
- SHA512 62dc889a0bc0317a62c8298acf1b37a3800a21fef4950a1b58350ef1b808b4780603008a7ea60f4c758b42bd848ce9406d62213479ba87cfe2e2364ec9f96846
- MD5 SHA1 SHA512
Score

10^/10

icedid 2607846789 banker trojan persistence
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

icedid2607846789bankertrojan

behavioral2

© 2018-2026

Terms | Privacy