Overview

overview

10

Static

static

6035304123...d0.exe

windows7_x64

10

6035304123...d0.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0

  • Size

    268KB

  • Sample

    220507-ywwx6sdbh4

  • MD5

    7fc4fbaf58dbe28420dd8883cb1e20db

  • SHA1

    ba57795d45fdab496231194477a56ae9c4df73d9

  • SHA256

    60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0

  • SHA512

    b168aa0dd1e156a37cff5721f9bef0f5fee15ba1005df310ef061d04d19eaaa057ba70fcf87f0b6026b1dbc4545b29816df8b7f23932cd9d97854374812aaa9a

Score
10/10
icedid22672422bankerloadertrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

22672422

C2

eastzrada.club

feder5ru.club

adwerife.cyou

proanaliz.top

vzaimrazv.cyou

pipulosha.cyou
Attributes
  • auth_var

    5

  • url_path

    /audio/

Targets

    • Target

      60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0

    • Size

      268KB

    • MD5

      7fc4fbaf58dbe28420dd8883cb1e20db

    • SHA1

      ba57795d45fdab496231194477a56ae9c4df73d9

    • SHA256

      60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0

    • SHA512

      b168aa0dd1e156a37cff5721f9bef0f5fee15ba1005df310ef061d04d19eaaa057ba70fcf87f0b6026b1dbc4545b29816df8b7f23932cd9d97854374812aaa9a

    Score
    10/10
    icedid22672422bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks