Overview

overview

10

Static

static

iced_refactor.exe

windows7_x64

10

iced_refactor.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    30-04-2022 15:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    iced_refactor.exe

  • Size

    142KB

  • MD5

    17091a1e444f306b928d69f2b905bc8b

  • SHA1

    1078744833050626e9681c7c233c3a0963a0b559

  • SHA256

    76cd290b236b11bd18d81e75e41682208e4c0a5701ce7834a9e289ea9e06eb7e

  • SHA512

    4a62f6a289f06b90d6ca080793cf4ae85e1adca3c2d83c66375ae6458f8ed9d58d7e57649634d7e4a722e7c1f252156883641c822590d38c70d9dbadec6fa29d

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

boldidiotruss.xyz

nizaoplov.xyz

153ishak.best

ilu21plane.xyz

Signatures

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid
  • IcedID Second Stage Loader 2 IoCs
    loader

Processes

  • C:\Users\Admin\AppData\Local\Temp\iced_refactor.exe
    "C:\Users\Admin\AppData\Local\Temp\iced_refactor.exe"
    1⤵
      PID:2040

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2040-54-0x0000000075B71000-0x0000000075B73000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2040-55-0x0000000000850000-0x0000000000855000-memory.dmp

      Filesize

      20KB

      Download

    • memory/2040-56-0x0000000000850000-0x000000000088F000-memory.dmp

      Filesize

      252KB

      Download