Overview

overview

10

Static

static

b73f8697.exe

windows7_x64

10

b73f8697.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b73f8697

  • Size

    36KB

  • Sample

    220419-wmrkzsbeb8

  • MD5

    3e849d9099875258dd84050b9ea2623c

  • SHA1

    f9911bbd98816cb29d03780e4f749cbd876b2f7e

  • SHA256

    0ed6e961a7bcebf37764de044209710dc23a004a9e2e51fe8e778df87e64819b

  • SHA512

    56c58462607b47926024b68fc9932326565113c5bd491bfec3f0a426cd70d6307a3abd97646220d870591c61d17982bd7c56e351166469dd90ca0b0931876ec2

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

dekeoipsi.top

Targets

    • Target

      b73f8697

    • Size

      36KB

    • MD5

      3e849d9099875258dd84050b9ea2623c

    • SHA1

      f9911bbd98816cb29d03780e4f749cbd876b2f7e

    • SHA256

      0ed6e961a7bcebf37764de044209710dc23a004a9e2e51fe8e778df87e64819b

    • SHA512

      56c58462607b47926024b68fc9932326565113c5bd491bfec3f0a426cd70d6307a3abd97646220d870591c61d17982bd7c56e351166469dd90ca0b0931876ec2

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks