icedid | 70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e | Triage

Analysis

max time kernel
145s
max time network
156s
platform
windows7_x64
resource
win7-20220414-en
submitted
15-04-2022 13:18

Sharing

Report Analysis Logs

General

Target

70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e.exe
Size

655KB
MD5

3957a64b61de7dae195f4791c83184b8
SHA1

c3f90882b2d797a65780877937f280000b86619a
SHA256

70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e
SHA512

7551e54cebc5902ff7082a90b1f816f3601114941b116ac182c41ad96f4f42c866ec86a2dd0a2493b9a8b1bd5d2d0af20e4136a5b4e68a47d13f3d09361de083

Score

10^/10

icedid banker loader trojan

Malware Config

Signatures

IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
trojan banker icedid

IcedID First Stage Loader 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/800-56-0x00000000000E0000-0x00000000000ED000-memory.dmp	IcedidFirstLoader

C:\Users\Admin\AppData\Local\Temp\70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e.exe
"C:\Users\Admin\AppData\Local\Temp\70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e.exe"
1⤵
PID:800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/800-54-0x00000000765F1000-0x00000000765F3000-memory.dmp

Filesize
8KB

Download
memory/800-56-0x00000000000E0000-0x00000000000ED000-memory.dmp

Filesize
52KB

Download
memory/800-55-0x00000000009F0000-0x0000000000A98000-memory.dmp

Filesize
672KB

Download