Overview

overview

10

Static

static

fa79f39d25...a4.exe

windows7_x64

10

fa79f39d25...a4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa79f39d2512326f3645ec051f32c4b0f175142bc5f43e0b869bdcfe32d18ca4

  • Size

    228KB

  • Sample

    220512-pnm6mahbbj

  • MD5

    0e582f1d214712c263429692549010ef

  • SHA1

    50c8cbdaa3b781d00e6e8df336af7620fcb90136

  • SHA256

    fa79f39d2512326f3645ec051f32c4b0f175142bc5f43e0b869bdcfe32d18ca4

  • SHA512

    7eac85ab9f8e9ff4d7602569d363293639b997e609694ade84e8211aa9dddeec67984281f0775da6970d41e0ed9e13d6d845afaf14a3dbd1287b819d56c010ff

Score
10/10
icedid3940132575bankerloadertrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

3940132575

C2

besitxavier.best

nazifestivo.best
Attributes
  • auth_var

    2

  • url_path

    /audio/

Targets

    • Target

      fa79f39d2512326f3645ec051f32c4b0f175142bc5f43e0b869bdcfe32d18ca4

    • Size

      228KB

    • MD5

      0e582f1d214712c263429692549010ef

    • SHA1

      50c8cbdaa3b781d00e6e8df336af7620fcb90136

    • SHA256

      fa79f39d2512326f3645ec051f32c4b0f175142bc5f43e0b869bdcfe32d18ca4

    • SHA512

      7eac85ab9f8e9ff4d7602569d363293639b997e609694ade84e8211aa9dddeec67984281f0775da6970d41e0ed9e13d6d845afaf14a3dbd1287b819d56c010ff

    Score
    10/10
    icedid3940132575bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks