icedid | c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f | Triage

Submit
Reports

Overview

overview

Static

static

c9a0d2f664...5f.dll

windows7_x64

c9a0d2f664...5f.dll

windows10-2004_x64

Sharing

General

Target

c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f
Size

460KB
Sample

220315-t2gm8addg7
MD5

afcdc096a7a22b16a2343bd1dd0fca4f
SHA1

f4eac2b02fcee42298b8b0352e4fd146fe97c9f5
SHA256

c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f
SHA512

5db4c9c33781a747e82dd568214cf906a50c44371c83a5f9a4c29edbc4f4379bc0e44c14f8a67dc8047c4ba915011889c1e50b51a7da6155cc31777531737183

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f.dll

Resource

win7-20220310-en

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f.dll

Resource

win10v2004-en-20220113

icedid banker loader trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

karimorodrigo.pw

airtopolos.best

Targets

- Target
  
  c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f
- Size
  
  460KB
- MD5
  
  afcdc096a7a22b16a2343bd1dd0fca4f
- SHA1
  
  f4eac2b02fcee42298b8b0352e4fd146fe97c9f5
- SHA256
  
  c9a0d2f664277db1c90ebb2bc9549ef36d0fcd97332a47144ddaee0c1a2e725f
- SHA512
  
  5db4c9c33781a747e82dd568214cf906a50c44371c83a5f9a4c29edbc4f4379bc0e44c14f8a67dc8047c4ba915011889c1e50b51a7da6155cc31777531737183
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy