Overview

overview

10

Static

static

5f42123ef4...8d.exe

windows7_x64

10

5f42123ef4...8d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f42123ef4fc37ff4851a8f585c94ebc1abf0c02e3cc62cba7835497cbe55c8d

  • Size

    304KB

  • Sample

    220510-xnajjaadgr

  • MD5

    ae3b51bf4e30354ce395943fa296bb5b

  • SHA1

    6ddaf35f73afbee03cb45192d146c10ecfbe3d35

  • SHA256

    5f42123ef4fc37ff4851a8f585c94ebc1abf0c02e3cc62cba7835497cbe55c8d

  • SHA512

    0a46bf03cea6b79bb7a718139fdb2b1071697a5c3f31ca1c000c6ec78e54174eeba778383c2bdfc503723c4794310782a54ee7d3b3a03865cda41f6e9d6ecf4f

Score
10/10
icedid3266946033bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

3266946033

C2

headcaliber.top

destroycruiser.cyou
Attributes
  • auth_var

    1

  • url_path

    /audio/

Extracted

Family

icedid

Targets

    • Target

      5f42123ef4fc37ff4851a8f585c94ebc1abf0c02e3cc62cba7835497cbe55c8d

    • Size

      304KB

    • MD5

      ae3b51bf4e30354ce395943fa296bb5b

    • SHA1

      6ddaf35f73afbee03cb45192d146c10ecfbe3d35

    • SHA256

      5f42123ef4fc37ff4851a8f585c94ebc1abf0c02e3cc62cba7835497cbe55c8d

    • SHA512

      0a46bf03cea6b79bb7a718139fdb2b1071697a5c3f31ca1c000c6ec78e54174eeba778383c2bdfc503723c4794310782a54ee7d3b3a03865cda41f6e9d6ecf4f

    Score
    10/10
    icedid3266946033bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks