Overview

overview

10

Static

static

sol3nia.zip

windows7_x64

1

sol3nia.zip

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sol3nia.zip

  • Size

    206KB

  • Sample

    220629-ykjtgacdeq

  • MD5

    11d335ba207582c5e2790f7907181a17

  • SHA1

    a9eb4ae2b5c9064c5a01363cfba2359fa48f5aef

  • SHA256

    2a469601228e95defe50092a2dde56bd0a6ea62ff8162653094c9d41f7ab95a4

  • SHA512

    904dcbd3a7ae2ff1f7c06b6cc9c791339d903dfdfaceb9dd97685c092edd9122ec5c8560273044d0228898f0e0350fd24b98d628d56cfaee51962c2ffa113e51

Score
10/10
icedid3585208491bankerloadersuricatatrojan

Malware Config

Extracted

Family

icedid

Campaign

3585208491

C2

bredofenction.com

Targets

    • Target

      sol3nia.zip

    • Size

      206KB

    • MD5

      11d335ba207582c5e2790f7907181a17

    • SHA1

      a9eb4ae2b5c9064c5a01363cfba2359fa48f5aef

    • SHA256

      2a469601228e95defe50092a2dde56bd0a6ea62ff8162653094c9d41f7ab95a4

    • SHA512

      904dcbd3a7ae2ff1f7c06b6cc9c791339d903dfdfaceb9dd97685c092edd9122ec5c8560273044d0228898f0e0350fd24b98d628d56cfaee51962c2ffa113e51

    Score
    10/10
    icedid3585208491bankerloadersuricatatrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks