Overview

overview

10

Static

static

f157864d70...a8.exe

windows7_x64

10

f157864d70...a8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f157864d7032fdc5231b3a34a1c27b53b1a887f4a5883f330b7ba43080035aa8

  • Size

    257KB

  • Sample

    220414-rsdh4acedj

  • MD5

    8d5bc2eb1aef4784d26c56c5ef28f150

  • SHA1

    c8eaaaaad9cd300d9fa0ca6660ce8da7785a0ce1

  • SHA256

    f157864d7032fdc5231b3a34a1c27b53b1a887f4a5883f330b7ba43080035aa8

  • SHA512

    482f82879761a304bc2f274f07a401e9b3a27f08f3d18b20b9429935f3531050c90a653fe3f5848068375adce005ccd9e8500f641195c5961416cb5a714780ad

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

besitxavier.best

nazifestivo.best

Targets

    • Target

      f157864d7032fdc5231b3a34a1c27b53b1a887f4a5883f330b7ba43080035aa8

    • Size

      257KB

    • MD5

      8d5bc2eb1aef4784d26c56c5ef28f150

    • SHA1

      c8eaaaaad9cd300d9fa0ca6660ce8da7785a0ce1

    • SHA256

      f157864d7032fdc5231b3a34a1c27b53b1a887f4a5883f330b7ba43080035aa8

    • SHA512

      482f82879761a304bc2f274f07a401e9b3a27f08f3d18b20b9429935f3531050c90a653fe3f5848068375adce005ccd9e8500f641195c5961416cb5a714780ad

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks