icedid | 101b6b6bec4ae6e698d793d1f9d1a905c03bac2da987ba68033a16fed414a95c | Triage

Submit
Reports

Overview

overview

Static

static

AnyDesk.exe

windows7_x64

AnyDesk.exe

windows10-2004_x64

Sharing

General

Target

AnyDesk.exe
Size

1.6MB
Sample

220217-2rjzlafdd3
MD5

397640d8c42e1f06cc45fb6ce689be8b
SHA1

8e56c7883ad7eefa314b9a4f234f1b59a9e7f8fb
SHA256

101b6b6bec4ae6e698d793d1f9d1a905c03bac2da987ba68033a16fed414a95c
SHA512

60708d311b7bd473f6981de94ccfea05c22e956944c675ac9b457b2585e53d5bd132db70a1df9dbb9b7c1077c6b819cf4cbbc57b18503d8602442a3415ba8166

Score

10^/10

icedid 494770699 banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

AnyDesk.exe

Resource

win7-en-20211208

icedid 494770699 banker trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

AnyDesk.exe

Resource

win10v2004-en-20220112

icedid 494770699 banker trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

Campaign

494770699

C2

oceriesfornot.top

Targets

- Target
  
  AnyDesk.exe
- Size
  
  1.6MB
- MD5
  
  397640d8c42e1f06cc45fb6ce689be8b
- SHA1
  
  8e56c7883ad7eefa314b9a4f234f1b59a9e7f8fb
- SHA256
  
  101b6b6bec4ae6e698d793d1f9d1a905c03bac2da987ba68033a16fed414a95c
- SHA512
  
  60708d311b7bd473f6981de94ccfea05c22e956944c675ac9b457b2585e53d5bd132db70a1df9dbb9b7c1077c6b819cf4cbbc57b18503d8602442a3415ba8166
Score

10^/10

icedid 494770699 banker trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

icedid494770699bankertrojan

behavioral2

icedid494770699bankertrojan

© 2018-2024

Terms | Privacy