Overview

overview

10

Static

static

dc6e35d1e5...56.exe

windows7_x64

10

dc6e35d1e5...56.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc6e35d1e55d1d77039e026b647c19d975114c02a541327770688eee00912f56

  • Size

    380KB

  • Sample

    220701-h3lssahdfr

  • MD5

    10da99c2fa3cc2722a5da7ce984f43cb

  • SHA1

    9b4b7272f2feb3754d994c20006f0796c3a215a8

  • SHA256

    dc6e35d1e55d1d77039e026b647c19d975114c02a541327770688eee00912f56

  • SHA512

    4532460685f6ca3af148b56719e37cbaf41323fef554d89995b78fc37ceaf7bfad19c60e5bb09cce73441819c2ef75ceb6817b05c7da94c6290cfbb6b4d578b2

Score
10/10
icedid1604739030bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

1604739030

C2

gerontos.top

derilopa.top

desreona.top

seniorex.top

dezaredo.top

netionax.top

gerrredona.top

nameseorin.top

dirosad.top

colonisfg.com
Attributes
  • auth_var

    2

  • url_path

    /index.php

Targets

    • Target

      dc6e35d1e55d1d77039e026b647c19d975114c02a541327770688eee00912f56

    • Size

      380KB

    • MD5

      10da99c2fa3cc2722a5da7ce984f43cb

    • SHA1

      9b4b7272f2feb3754d994c20006f0796c3a215a8

    • SHA256

      dc6e35d1e55d1d77039e026b647c19d975114c02a541327770688eee00912f56

    • SHA512

      4532460685f6ca3af148b56719e37cbaf41323fef554d89995b78fc37ceaf7bfad19c60e5bb09cce73441819c2ef75ceb6817b05c7da94c6290cfbb6b4d578b2

    Score
    10/10
    icedid1604739030bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks