Description
IcedID is a banking trojan capable of stealing credentials.
General
Target
Size
Sample
7909866a9dd6174fa51e54c57cd9d675602f395c40181ab49df2f4b971d3e2fc
297KB
220503-anh5cadcc9
Score
10/10
MD5
SHA1
SHA256
SHA512
d46361783ad06859219c08e602ce584b
edda43f12fc840dd5e5e7d6df677e115320e261c
7909866a9dd6174fa51e54c57cd9d675602f395c40181ab49df2f4b971d3e2fc
f942f937148b5920715f73942690031f8fb3b727ada404d69c93344764b04adc5ce70e2edf31187d2239365f40e11af9fd586d62e9ebde33ca129fec3d02f61d
Malware Config
Extracted
| Family | icedid |
| C2 |
filopipilo.top fihokiliopo.pw |
Targets
Target
MD5
Filesize
7909866a9dd6174fa51e54c57cd9d675602f395c40181ab49df2f4b971d3e2fc
d46361783ad06859219c08e602ce584b
297KB
Score
10/10
SHA1
SHA256
SHA512
edda43f12fc840dd5e5e7d6df677e115320e261c
7909866a9dd6174fa51e54c57cd9d675602f395c40181ab49df2f4b971d3e2fc
f942f937148b5920715f73942690031f8fb3b727ada404d69c93344764b04adc5ce70e2edf31187d2239365f40e11af9fd586d62e9ebde33ca129fec3d02f61d
Tags
Signatures
-
IcedID, BokBot
-
IcedID Second Stage Loader
Tags
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks
static1
Score
N/A
behavioral1
Score
10/10
behavioral2
Score
10/10