Overview

overview

10

Static

static

986431aedf...60.exe

windows7_x64

10

986431aedf...60.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60

  • Size

    386KB

  • Sample

    220427-szbhrafbbp

  • MD5

    9b0b27e8ff72c99e3592ed1643a3a63a

  • SHA1

    643d1dfb9e2edbd627a3ed5c0d3541288a170605

  • SHA256

    986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60

  • SHA512

    24afa771dd27c07010707cb990494ab227b45fe3a5897f129eb34fece60d0b8e950deecc198d0b7288332c067386dde27d8c95f4a3c6d63815c67337761383d9

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

freeharritage.top

gohoemmuzlimanz.best

Targets

    • Target

      986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60

    • Size

      386KB

    • MD5

      9b0b27e8ff72c99e3592ed1643a3a63a

    • SHA1

      643d1dfb9e2edbd627a3ed5c0d3541288a170605

    • SHA256

      986431aedfa86035df63782c28f72330c9d6cfd17d346e5ab355ce0ecc258c60

    • SHA512

      24afa771dd27c07010707cb990494ab227b45fe3a5897f129eb34fece60d0b8e950deecc198d0b7288332c067386dde27d8c95f4a3c6d63815c67337761383d9

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks