Overview

overview

10

Static

static

Request-20...cx.zip

windows10_x64

10

Request-20...cx.zip

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Request-20220613-268_docx.zip

  • Size

    337KB

  • Sample

    220614-24849ahdgk

  • MD5

    27fdf561dcce4236beef966f9a6512f5

  • SHA1

    407d94cf9e97e71a42e054438906a8af9f239b14

  • SHA256

    a90bed1c9cf1411320f02ecab6b55c24d04112ee22d30609d49061542dd53cb7

  • SHA512

    15240b7af89f40a78e6498e0cbadec0660a6643f7e55f20fbd464ef3cd7faf1bbcf80207eb45fe76190b462f23f45b94c3d27370fc9b50bb24b3ca9b82d56daa

Score
10/10
icedid1328647508bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

1328647508

C2

didojanza.com

Targets

    • Target

      Request-20220613-268_docx.zip

    • Size

      337KB

    • MD5

      27fdf561dcce4236beef966f9a6512f5

    • SHA1

      407d94cf9e97e71a42e054438906a8af9f239b14

    • SHA256

      a90bed1c9cf1411320f02ecab6b55c24d04112ee22d30609d49061542dd53cb7

    • SHA512

      15240b7af89f40a78e6498e0cbadec0660a6643f7e55f20fbd464ef3cd7faf1bbcf80207eb45fe76190b462f23f45b94c3d27370fc9b50bb24b3ca9b82d56daa

    Score
    10/10
    icedid1328647508bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks