icedid | 95431d74efcd74d9999ec750c7b1b9b7c3c33e916e98c8590a23d6bfc9059834 | Triage

Sharing

General

Target

790274f5be09fc4e5add5c730f84e0c4.dll.exe
Size

317KB
Sample

220926-sx4frabbh2
MD5

790274f5be09fc4e5add5c730f84e0c4
SHA1

5c111b3d136c8f6630a11e4b3f6e6a9c02fe62d0
SHA256

95431d74efcd74d9999ec750c7b1b9b7c3c33e916e98c8590a23d6bfc9059834
SHA512

ed4508ac397b14c28b7233bce5f889d931ad5bef9833be6fb5e6a91890f1a33ce511927d1db530f5662112b2ca95bbe09c9200ca182e239e4402b060098416ce
SSDEEP

6144:R+A2m2kP7+sOjcroyI0xwlh8boidmQp1tRdnjU8bM:Rp2/kP7yj1kuvcU8g

Score

10^/10

icedid 1023645195 banker loader trojan

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

- Target
  
  790274f5be09fc4e5add5c730f84e0c4.dll.exe
- Size
  
  317KB
- MD5
  
  790274f5be09fc4e5add5c730f84e0c4
- SHA1
  
  5c111b3d136c8f6630a11e4b3f6e6a9c02fe62d0
- SHA256
  
  95431d74efcd74d9999ec750c7b1b9b7c3c33e916e98c8590a23d6bfc9059834
- SHA512
  
  ed4508ac397b14c28b7233bce5f889d931ad5bef9833be6fb5e6a91890f1a33ce511927d1db530f5662112b2ca95bbe09c9200ca182e239e4402b060098416ce
- SSDEEP
  
  6144:R+A2m2kP7+sOjcroyI0xwlh8boidmQp1tRdnjU8bM:Rp2/kP7yj1kuvcU8g
Score

10^/10

icedid 1023645195 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid1023645195bankerloadertrojan

behavioral2

icedid1023645195bankerloadertrojan