Overview

overview

10

Static

static

4215e9ef11...01.exe

windows7_x64

10

4215e9ef11...01.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4215e9ef112907ed9910953ec243a93f9e689fe94c4170b35baca4ee6d1fc901

  • Size

    804KB

  • Sample

    220708-d8pz6saac3

  • MD5

    c8ae7258ec9a1b00849267b930ad2719

  • SHA1

    77aec7943e05f4bbc5bd9118a8f1e9d327b4c9e7

  • SHA256

    4215e9ef112907ed9910953ec243a93f9e689fe94c4170b35baca4ee6d1fc901

  • SHA512

    df02215e2376cc8e0b9fb5c18c855b614816b7e1202f1b0aef544f4f27347294c8595395396045a4db8f498ae6be72e724ae1ac251f0bd80c297e86211a1cf24

Score
10/10
icedid548174735bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

548174735

C2

gfthwards.com

gfthwards.eu

gfthwards.net

presifered.com

coujtried.com
Attributes
  • auth_var

    2

  • url_path

    /index.php

Targets

    • Target

      4215e9ef112907ed9910953ec243a93f9e689fe94c4170b35baca4ee6d1fc901

    • Size

      804KB

    • MD5

      c8ae7258ec9a1b00849267b930ad2719

    • SHA1

      77aec7943e05f4bbc5bd9118a8f1e9d327b4c9e7

    • SHA256

      4215e9ef112907ed9910953ec243a93f9e689fe94c4170b35baca4ee6d1fc901

    • SHA512

      df02215e2376cc8e0b9fb5c18c855b614816b7e1202f1b0aef544f4f27347294c8595395396045a4db8f498ae6be72e724ae1ac251f0bd80c297e86211a1cf24

    Score
    10/10
    icedid548174735bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks