Overview

overview

10

Static

static

08966fc06c...d5.exe

windows7_x64

10

08966fc06c...d5.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08966fc06c2e26f4dbb36f50812afd3863aa7ae04463bc931506a97a8d866cd5

  • Size

    220KB

  • Sample

    220530-1a114sbfh4

  • MD5

    1a7c450bdcfe99da1427d976de6d7246

  • SHA1

    ddd5895e7837abfed13e28630e21884901966f4f

  • SHA256

    08966fc06c2e26f4dbb36f50812afd3863aa7ae04463bc931506a97a8d866cd5

  • SHA512

    0403918e746f9906e91a90bc3442649666ef49ac559d53daca6b25a50ca067d20926dd5a3f7f097a91df3b6db07396d011bbe41f3a3deb3a2010ce2f9e82fa37

Score
10/10
icedid513366864bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

513366864

C2

gfthwards.com

gfthwards.eu

gfthwards.net

presifered.com
Attributes
  • auth_var

    8

  • url_path

    /index.php

Targets

    • Target

      08966fc06c2e26f4dbb36f50812afd3863aa7ae04463bc931506a97a8d866cd5

    • Size

      220KB

    • MD5

      1a7c450bdcfe99da1427d976de6d7246

    • SHA1

      ddd5895e7837abfed13e28630e21884901966f4f

    • SHA256

      08966fc06c2e26f4dbb36f50812afd3863aa7ae04463bc931506a97a8d866cd5

    • SHA512

      0403918e746f9906e91a90bc3442649666ef49ac559d53daca6b25a50ca067d20926dd5a3f7f097a91df3b6db07396d011bbe41f3a3deb3a2010ce2f9e82fa37

    Score
    10/10
    icedid513366864bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks