Overview

overview

10

Static

static

9740209b37...89.exe

windows7_x64

10

9740209b37...89.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9740209b371081d4a36183cc227fc5f978c9bba65b3db7c4a58f6a64c7514d89

  • Size

    547KB

  • Sample

    220508-xzm9rsgaa2

  • MD5

    4284e33d5acd0c3f537bc0a03b27b289

  • SHA1

    8e446941e1b727fd4b32002c3848c568b473817b

  • SHA256

    9740209b371081d4a36183cc227fc5f978c9bba65b3db7c4a58f6a64c7514d89

  • SHA512

    0561ccf43541531af17012294379e0e2bc5b3c3595691eb0ea44ff54ad8988633fb327220ce0a484602442a87f52cba11dbee5d4def415377a035891949510c5

Score
10/10
icedid1076950734bankerloadertrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

1076950734

C2

justiceminister.best

fivejudgescatholic.cyou
Attributes
  • auth_var

    2

  • url_path

    /audio/

Targets

    • Target

      9740209b371081d4a36183cc227fc5f978c9bba65b3db7c4a58f6a64c7514d89

    • Size

      547KB

    • MD5

      4284e33d5acd0c3f537bc0a03b27b289

    • SHA1

      8e446941e1b727fd4b32002c3848c568b473817b

    • SHA256

      9740209b371081d4a36183cc227fc5f978c9bba65b3db7c4a58f6a64c7514d89

    • SHA512

      0561ccf43541531af17012294379e0e2bc5b3c3595691eb0ea44ff54ad8988633fb327220ce0a484602442a87f52cba11dbee5d4def415377a035891949510c5

    Score
    10/10
    icedid1076950734bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks