Overview

overview

10

Static

static

a056b2322d...42.exe

windows7-x64

10

a056b2322d...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142

  • Size

    456KB

  • Sample

    220724-rwcqzafggj

  • MD5

    c04f5dc534fa5b1acef3c08d9ab3f3cb

  • SHA1

    fc0e221a14b8e196a4c03859051c5212b91544ac

  • SHA256

    a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142

  • SHA512

    39f23432000e2595563a542b264318cd94fe0a0ab33692a071fc3c44f7956f0002b85af5e6fbb275d98eace954f752922ace6194db86b4c24b68553e5114cc05

Score
10/10
icedid548174735bankerloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

548174735

C2

magnwnce.com

corposted.com

presifered.com

coujtried.com

molinaro.top

amongolia.com

jjanuatu.com
Attributes
  • auth_var

    3

  • url_path

    /index.php

Targets

    • Target

      a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142

    • Size

      456KB

    • MD5

      c04f5dc534fa5b1acef3c08d9ab3f3cb

    • SHA1

      fc0e221a14b8e196a4c03859051c5212b91544ac

    • SHA256

      a056b2322dcfd6c348864feb7cf3c228b384e520711cd0ec5a95bb90c2959142

    • SHA512

      39f23432000e2595563a542b264318cd94fe0a0ab33692a071fc3c44f7956f0002b85af5e6fbb275d98eace954f752922ace6194db86b4c24b68553e5114cc05

    Score
    10/10
    icedid548174735bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks