Overview

overview

10

Static

static

0131026051...34.exe

windows7_x64

10

0131026051...34.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0131026051228584a83997be64c30e7c9cd90c1657d9fffb11d427f577f4a134

  • Size

    84KB

  • Sample

    220417-r53zhsgdcr

  • MD5

    e518b053633f83917af43c3c6f81c141

  • SHA1

    4c85a76114f2886f2c873c212f88320e4715ba93

  • SHA256

    0131026051228584a83997be64c30e7c9cd90c1657d9fffb11d427f577f4a134

  • SHA512

    dbc2b62f2f2e8ca09b042e21516810cf0f34ef722a651b9661bef3ac5497cad8b87c5eff90a16190e3b44848100ecf0d14edc872afb38efdd27db0d7626da836

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

vergilliostar.top

mentokiller.top

ekxortsisto.best

netutto.best

Targets

    • Target

      0131026051228584a83997be64c30e7c9cd90c1657d9fffb11d427f577f4a134

    • Size

      84KB

    • MD5

      e518b053633f83917af43c3c6f81c141

    • SHA1

      4c85a76114f2886f2c873c212f88320e4715ba93

    • SHA256

      0131026051228584a83997be64c30e7c9cd90c1657d9fffb11d427f577f4a134

    • SHA512

      dbc2b62f2f2e8ca09b042e21516810cf0f34ef722a651b9661bef3ac5497cad8b87c5eff90a16190e3b44848100ecf0d14edc872afb38efdd27db0d7626da836

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks