Overview

overview

10

Static

static

2b885b93e9...45.exe

windows7_x64

10

2b885b93e9...45.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b885b93e9c8ca7fa984a1ce4480febc4a7ed132c7e020714fd982c4b91fcc45

  • Size

    1.4MB

  • Sample

    220508-dvktasebd6

  • MD5

    e5552b7fb09cd4ffef80ff2ac6f858cf

  • SHA1

    5d1493056760d793ddb129b5c41e2e2d93e76575

  • SHA256

    2b885b93e9c8ca7fa984a1ce4480febc4a7ed132c7e020714fd982c4b91fcc45

  • SHA512

    058daa06836238d8f91da7c6e1680fdcafbac4e44fe9fd5dbeebb8e638be05037cd4f4bef71682ff1a70105bdddcdc3ff3b15d9a42598a3d6805236f45339142

Score
10/10
icedid345673251bankerloadertrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

345673251

C2

supportayzer.shop

bookoffathes.pw
Attributes
  • auth_var

    1

  • url_path

    /audio/

Targets

    • Target

      2b885b93e9c8ca7fa984a1ce4480febc4a7ed132c7e020714fd982c4b91fcc45

    • Size

      1.4MB

    • MD5

      e5552b7fb09cd4ffef80ff2ac6f858cf

    • SHA1

      5d1493056760d793ddb129b5c41e2e2d93e76575

    • SHA256

      2b885b93e9c8ca7fa984a1ce4480febc4a7ed132c7e020714fd982c4b91fcc45

    • SHA512

      058daa06836238d8f91da7c6e1680fdcafbac4e44fe9fd5dbeebb8e638be05037cd4f4bef71682ff1a70105bdddcdc3ff3b15d9a42598a3d6805236f45339142

    Score
    10/10
    icedid345673251bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks