Description
IcedID is a banking trojan capable of stealing credentials.
48e69f94c801c87dc65c445d2a61398bc0708e41c78ef70a041d700f32a1dce6
General
Target
Size
Sample
48e69f94c801c87dc65c445d2a61398bc0708e41c78ef70a041d700f32a1dce6
186KB
220508-2p7b4scegm
Score
10 /10
MD5
SHA1
SHA256
SHA512
70c7108b898eb8b6c058a7c8c2994f96
1ecc6f1a3f069588c2b25bf130587a0e67bf0997
48e69f94c801c87dc65c445d2a61398bc0708e41c78ef70a041d700f32a1dce6
a52afc3fc1bdb105ba8667bd277bb4a61f942ac9cf8fd14d128cbd971124491cac7b7066fbafac5ad7b8a090264c817842b4ff97bfadb411cf1b9ae629487ab2
Malware Config
Extracted
| Family | icedid |
| C2 |
vernerfonbraun.pw |
Targets
Target
MD5
Filesize
48e69f94c801c87dc65c445d2a61398bc0708e41c78ef70a041d700f32a1dce6
70c7108b898eb8b6c058a7c8c2994f96
186KB
Score
10/10
SHA1
SHA256
SHA512
1ecc6f1a3f069588c2b25bf130587a0e67bf0997
48e69f94c801c87dc65c445d2a61398bc0708e41c78ef70a041d700f32a1dce6
a52afc3fc1bdb105ba8667bd277bb4a61f942ac9cf8fd14d128cbd971124491cac7b7066fbafac5ad7b8a090264c817842b4ff97bfadb411cf1b9ae629487ab2
Tags
Signatures
-
IcedID, BokBot
-
IcedID First Stage Loader
Tags
-
Blocklisted process makes network request
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks