19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

General
Target

19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

Size

216KB

Sample

220510-xna53aadhj

Score
10 /10
MD5

c234119dd7a60c83cee311446605ff57

SHA1

6103a6d76359340a399fc2aa77ab1f62125a8703

SHA256

19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

SHA512

05a7de1bd27d28e5da2c8b1933adeb4c66fbebddecfeda9099ef6c6f7f4f1138cdf0863214f3245463cfd6330665b0613cdf8219fbab9b2d49f83e9ad1849ef8

Malware Config

Extracted

Family icedid
Botnet 3224177144
C2

hreglikoli.cyou

ironcontra.cyou

Attributes
auth_var
7
url_path
/audio/

Extracted

Family icedid
Targets
Target

19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

MD5

c234119dd7a60c83cee311446605ff57

Filesize

216KB

Score
10/10
SHA1

6103a6d76359340a399fc2aa77ab1f62125a8703

SHA256

19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

SHA512

05a7de1bd27d28e5da2c8b1933adeb4c66fbebddecfeda9099ef6c6f7f4f1138cdf0863214f3245463cfd6330665b0613cdf8219fbab9b2d49f83e9ad1849ef8

Tags

Signatures

  • IcedID, BokBot

    Description

    IcedID is a banking trojan capable of stealing credentials.

    Tags

  • IcedID Second Stage Loader

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1