icedid | bf80df427ccc1355faf0afbf7e570f6af1b1390632e8f966e0db002f951b00b5 | Triage

Sharing

General

Target

dawdlers.db
Size

452KB
Sample

220926-qlrayacagn
MD5

9d7e2bde7c7266bb867b9a612613123a
SHA1

6079e2cf55d210fb8d6553842d049b232ed5b00e
SHA256

bf80df427ccc1355faf0afbf7e570f6af1b1390632e8f966e0db002f951b00b5
SHA512

82556fa928292c24e8ac481c9c65d5bc20692f597acbe5acad974264db816e8ef96ab3de0e83763fc689a540b7f9d3caeee44759b36994b91125e3a32290f083
SSDEEP

3072:ywJOuzQiAIOvJ+1rzyp5cq1LGKFKHrt9F5p3BZiZqBAJLMok3n+CBrMrRZm1xAyn:9JOuZrzyp5V1LGKiBBMSkLTc+yyZmA2

Score

10^/10

icedid 2349072319 banker loader trojan

Malware Config

Extracted

Family

icedid

Campaign

2349072319

C2

sebdgoldingor.com

Targets

- Target
  
  dawdlers.db
- Size
  
  452KB
- MD5
  
  9d7e2bde7c7266bb867b9a612613123a
- SHA1
  
  6079e2cf55d210fb8d6553842d049b232ed5b00e
- SHA256
  
  bf80df427ccc1355faf0afbf7e570f6af1b1390632e8f966e0db002f951b00b5
- SHA512
  
  82556fa928292c24e8ac481c9c65d5bc20692f597acbe5acad974264db816e8ef96ab3de0e83763fc689a540b7f9d3caeee44759b36994b91125e3a32290f083
- SSDEEP
  
  3072:ywJOuzQiAIOvJ+1rzyp5cq1LGKFKHrt9F5p3BZiZqBAJLMok3n+CBrMrRZm1xAyn:9JOuZrzyp5V1LGKiBBMSkLTc+yyZmA2
Score

10^/10

icedid 2349072319 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Blocklisted process makes network request
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid2349072319bankerloadertrojan