Overview

overview

10

Static

static

870943b7e5...72.exe

windows7_x64

10

870943b7e5...72.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672

  • Size

    236KB

  • Sample

    220520-dsx1vafcb8

  • MD5

    02536494a006aae678ac0c2134c72915

  • SHA1

    759606e6ce70ebbe2b9c58bf7d80ab0721da3efe

  • SHA256

    870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672

  • SHA512

    46635664f20f45a96ea37e3b90fcaf13114b022898300ffd74063a04bb429f142b2d71ac5d0b3f0032a7692843ce333cf66599b3fb0a1aa225e614c60570fcae

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

loadfifth.com

Targets

    • Target

      870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672

    • Size

      236KB

    • MD5

      02536494a006aae678ac0c2134c72915

    • SHA1

      759606e6ce70ebbe2b9c58bf7d80ab0721da3efe

    • SHA256

      870943b7e5f58722ed20aa8c05e23b37725b7b759ada2f4096bc6fbbd6afe672

    • SHA512

      46635664f20f45a96ea37e3b90fcaf13114b022898300ffd74063a04bb429f142b2d71ac5d0b3f0032a7692843ce333cf66599b3fb0a1aa225e614c60570fcae

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks