Overview

overview

10

Static

static

cmd.bat

windows7_x64

1

cmd.bat

windows10-2004_x64

1

labor-.dll

windows7_x64

10

labor-.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    core.zip

  • Size

    799KB

  • Sample

    220604-ypb97addd8

  • MD5

    55154da8cc3ed9ea00bffa66ece1ef42

  • SHA1

    611f7884e5d979c542d2448264e97ee13559a923

  • SHA256

    1d6a67bfae44e5e9b8b6351737fb90472c7b62b38952e21b141fd7de2e4e2781

  • SHA512

    634ada110238d9fe28718248dd1ef8d20cffb3a4c87df528aad7b74faf23550a1b62860d531ae136ef17a8359cd81b43ec6d59827af3b23c9b865fee54ec73ec

Score
10/10
icedid3681413287bankercore_loadertrojan

Malware Config

Extracted

Family

icedid

Botnet

3681413287

C2

vadgeatemoz.com

akernilon.com

westdudil.com

leatyeals.com
Attributes
  • auth_var

    3

  • url_path

    /news/

Targets

    • Target

      cmd.bat

    • Size

      188B

    • MD5

      d67f758395e66ed03d9065d8c23f2894

    • SHA1

      1d635b99201ef4551132d29495e0c259404bd5eb

    • SHA256

      afc903fcce880470df94d38d1f877c114c16ba78d2a25a0b9094c99e425f3586

    • SHA512

      d48a6f81dc69bf0b9024e775c8620c504f1563e57978213635e3ebd546c450a3e8c621ba58d1dc1d1c2f71b4563ff8c7abd0915255874a59bfb4917c2cb2ff5f

    Score
    1/10
    behavioral1behavioral2

    • Target

      labor-.tmp

    • Size

      464KB

    • MD5

      6dff622395b320b2a1947480d697d3c0

    • SHA1

      b2d90b643749b06d6ae98e71205cab2e67bc1d56

    • SHA256

      82e07bd3ecada519802984139c213db4332bbc49b61509a6b40b7142c28f4900

    • SHA512

      59be37e0dfd5fef04763a51e449265a25176401a58b35b7b28016e99a6860437ed8985b0ffb14182eb8df2c61943a54a0bbab38466d67946ef652b5d107ded11

    Score
    10/10
    icedid3681413287bankercore_loadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks