Overview

overview

10

Static

static

f8f351415e...1e.exe

windows7_x64

10

f8f351415e...1e.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    f8f351415ee7c63613aede4a8b4642c2afa432396ef5f949a1b8e6a58210f41e
  • Size 238KB
  • Sample220508-bfbkzaahf3
  • SHA256 f8f351415ee7c63613aede4a8b4642c2afa432396ef5f949a1b8e6a58210f41e
  • MD5 SHA1 SHA512
Score
10/10
icedid2635507097bankerloadertrojan

Malware Config

Extracted

Family

  • icedid

Extracted

Family

  • icedid

Botnet

  • 2635507097

C2

  • rufepuksuka.cyou

  • uzhokpidarok.cyou

Attributes
  • auth_var

    1

  • url_path

    /audio/

Targets

    • Target
      f8f351415ee7c63613aede4a8b4642c2afa432396ef5f949a1b8e6a58210f41e
    • Size 238KB
    • SHA256 f8f351415ee7c63613aede4a8b4642c2afa432396ef5f949a1b8e6a58210f41e
    • MD5 SHA1 SHA512
    Score
    10/10
    icedid2635507097bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks