icedid | f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940 | Triage

Submit
Reports

Overview

overview

Static

static

f1f260389c...40.exe

windows7_x64

f1f260389c...40.exe

windows10-2004_x64

Sharing

General

Target

f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940
Size

300KB
Sample

220427-szaapafbbn
MD5

6c6003731a1bd0bc82d74a0d9591a50d
SHA1

0585bd664fe452fe6544ed0fa37989607d630758
SHA256

f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940
SHA512

543d46727905af53506242689f3c5cad6e522b3a37168702b14fcefc2ccaaa21087745e59b71af37e3a9f9d03f85747d8aebc4bbe4de6ff0521d3681e5dd60af

Score

10^/10

icedid banker loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940.exe

Resource

win7-20220414-en

icedid banker loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940.exe

Resource

win10v2004-20220414-en

icedid banker loader trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

icedid

C2

inforesuaremedown.club

tsalkshower.cyou

Targets

- Target
  
  f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940
- Size
  
  300KB
- MD5
  
  6c6003731a1bd0bc82d74a0d9591a50d
- SHA1
  
  0585bd664fe452fe6544ed0fa37989607d630758
- SHA256
  
  f1f260389c97aa75fffdc5c6e4674fd43d7bf21f696a94f759cb3a7f0f55f940
- SHA512
  
  543d46727905af53506242689f3c5cad6e522b3a37168702b14fcefc2ccaaa21087745e59b71af37e3a9f9d03f85747d8aebc4bbe4de6ff0521d3681e5dd60af
Score

10^/10

icedid banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedidbankerloadertrojan

behavioral2

icedidbankerloadertrojan

© 2018-2024

Terms | Privacy