Description
IcedID is a banking trojan capable of stealing credentials.
19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441
General
Target
Size
Sample
19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441
216KB
220510-xna53aadhj
Score
10 /10
MD5
SHA1
SHA256
SHA512
c234119dd7a60c83cee311446605ff57
6103a6d76359340a399fc2aa77ab1f62125a8703
19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441
05a7de1bd27d28e5da2c8b1933adeb4c66fbebddecfeda9099ef6c6f7f4f1138cdf0863214f3245463cfd6330665b0613cdf8219fbab9b2d49f83e9ad1849ef8
Malware Config
Extracted
| Family | icedid |
| Botnet | 3224177144 |
| C2 |
hreglikoli.cyou ironcontra.cyou |
| Attributes |
auth_var 7
url_path /audio/ |
Extracted
| Family | icedid |
Targets
Target
MD5
Filesize
19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441
c234119dd7a60c83cee311446605ff57
216KB
Score
10/10
SHA1
SHA256
SHA512
6103a6d76359340a399fc2aa77ab1f62125a8703
19b7db1755e444c14ee0ac7c439e78fce09a29772ac5d9456fee873145f1b441
05a7de1bd27d28e5da2c8b1933adeb4c66fbebddecfeda9099ef6c6f7f4f1138cdf0863214f3245463cfd6330665b0613cdf8219fbab9b2d49f83e9ad1849ef8
Tags
Signatures
-
IcedID, BokBot
-
IcedID Second Stage Loader
Tags
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks