Overview

overview

10

Static

static

19b7db1755...41.exe

windows7_x64

10

19b7db1755...41.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

  • Size

    216KB

  • Sample

    220510-xna53aadhj

  • MD5

    c234119dd7a60c83cee311446605ff57

  • SHA1

    6103a6d76359340a399fc2aa77ab1f62125a8703

  • SHA256

    19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

  • SHA512

    05a7de1bd27d28e5da2c8b1933adeb4c66fbebddecfeda9099ef6c6f7f4f1138cdf0863214f3245463cfd6330665b0613cdf8219fbab9b2d49f83e9ad1849ef8

Score
10/10
icedid3224177144bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

3224177144

C2

hreglikoli.cyou

ironcontra.cyou
Attributes
  • auth_var

    7

  • url_path

    /audio/

Extracted

Family

icedid

Targets

    • Target

      19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

    • Size

      216KB

    • MD5

      c234119dd7a60c83cee311446605ff57

    • SHA1

      6103a6d76359340a399fc2aa77ab1f62125a8703

    • SHA256

      19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441

    • SHA512

      05a7de1bd27d28e5da2c8b1933adeb4c66fbebddecfeda9099ef6c6f7f4f1138cdf0863214f3245463cfd6330665b0613cdf8219fbab9b2d49f83e9ad1849ef8

    Score
    10/10
    icedid3224177144bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks