Overview

overview

10

Static

static

10

f5a0450f07...12.exe

windows7_x64

10

f5a0450f07...12.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5a0450f073d8309d7bb3979a5bb18bc05214bb95e15bc085e961a0c32ad1012.exe

  • Size

    21KB

  • Sample

    220330-a4l6yahffk

  • MD5

    7cd28ce0ec661acfce5d0c875c116fb1

  • SHA1

    67f91b5805bab51906e3debe271e443f6064f4da

  • SHA256

    f5a0450f073d8309d7bb3979a5bb18bc05214bb95e15bc085e961a0c32ad1012

  • SHA512

    a120ed7fcba578cb7b4ae2082513c9003309a2a32e9da1e8575e80764d63905ae0d3ffa4c569fce1dfa7a387e0a164af75ca88518482a23dadddd788c11a969e

Score
10/10
icedid1666752692bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Campaign

1666752692

Targets

    • Target

      f5a0450f073d8309d7bb3979a5bb18bc05214bb95e15bc085e961a0c32ad1012.exe

    • Size

      21KB

    • MD5

      7cd28ce0ec661acfce5d0c875c116fb1

    • SHA1

      67f91b5805bab51906e3debe271e443f6064f4da

    • SHA256

      f5a0450f073d8309d7bb3979a5bb18bc05214bb95e15bc085e961a0c32ad1012

    • SHA512

      a120ed7fcba578cb7b4ae2082513c9003309a2a32e9da1e8575e80764d63905ae0d3ffa4c569fce1dfa7a387e0a164af75ca88518482a23dadddd788c11a969e

    Score
    10/10
    icedid1666752692bankersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks