Overview

overview

10

Static

static

bce008d6d0...dc.exe

windows7_x64

10

bce008d6d0...dc.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc

  • Size

    445KB

  • Sample

    220503-agtmhadad8

  • MD5

    3122a67925ad572803e0259847d79ddb

  • SHA1

    5a3c35f0256f95990cf9f7b0b00c176ef67c6a14

  • SHA256

    bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc

  • SHA512

    b77cd92d91c57c1ee3630302036db214ebb879f6a0d446a61202c97abc5669ffcc37892c9b6d0eaf90318aea4efc6cc79b00c07d4ebadd1016ff080d67f997ce

Score
10/10
icedid586763123bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

586763123

C2

kylerdog.cyou

dogawaydered.top
Attributes
  • auth_var

    3

  • url_path

    /audio/

Extracted

Family

icedid

Targets

    • Target

      bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc

    • Size

      445KB

    • MD5

      3122a67925ad572803e0259847d79ddb

    • SHA1

      5a3c35f0256f95990cf9f7b0b00c176ef67c6a14

    • SHA256

      bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc

    • SHA512

      b77cd92d91c57c1ee3630302036db214ebb879f6a0d446a61202c97abc5669ffcc37892c9b6d0eaf90318aea4efc6cc79b00c07d4ebadd1016ff080d67f997ce

    Score
    10/10
    icedid586763123bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks