Overview

overview

10

Static

static

b6b31cca98...b0.dll

windows7_x64

10

b6b31cca98...b0.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b6b31cca984d64c13dac5c4fbdd1a13217cb628843718926b4447ff7d14471b0
  • Size 277KB
  • Sample220503-am65safgbp
  • SHA256 b6b31cca984d64c13dac5c4fbdd1a13217cb628843718926b4447ff7d14471b0
  • MD5 SHA1 SHA512
Score
10/10
icedid951045417bankerloadertrojan

Malware Config

Extracted

Family

  • icedid

Extracted

Family

  • icedid

Botnet

  • 951045417

C2

  • nazamoskaotp.xyz

  • 49vodysf.club

Attributes
  • auth_var

    1

  • url_path

    /audio/

Targets

    • Target
      b6b31cca984d64c13dac5c4fbdd1a13217cb628843718926b4447ff7d14471b0
    • Size 277KB
    • SHA256 b6b31cca984d64c13dac5c4fbdd1a13217cb628843718926b4447ff7d14471b0
    • MD5 SHA1 SHA512
    Score
    10/10
    icedid951045417bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks