icedid | 50cbe7e1ac258722c9ca2a96593ef18654ab54adb21523cfef83581747b3051b | Triage

Sharing

General

Target

4976727b780e87d5c4083936088394d9.dll.exe
Size

672KB
Sample

221004-s4q41abda9
MD5

4976727b780e87d5c4083936088394d9
SHA1

af2848a78e98f2409f23a509fc826f100b29f6db
SHA256

50cbe7e1ac258722c9ca2a96593ef18654ab54adb21523cfef83581747b3051b
SHA512

4fec9d42475b562a516283c4a40ceeeee7ffd655127ad90ac6f1e3da4587bc449d7a2e9a746bbb9bb884ffe3b0285de264d03e08cc6be9cbeae238000efa5069
SSDEEP

12288:hkgJSzrCEhwrC8yIJrlwgOW9xwMGwy0w7w4wJ+wwwZwb8bewf+HwddBlvK:hkgIPXR0gI7K

Score

10^/10

icedid 2399258081 banker loader trojan

Malware Config

Extracted

Family

icedid

Campaign

2399258081

C2

eysneolissionsm.com

Targets

- Target
  
  4976727b780e87d5c4083936088394d9.dll.exe
- Size
  
  672KB
- MD5
  
  4976727b780e87d5c4083936088394d9
- SHA1
  
  af2848a78e98f2409f23a509fc826f100b29f6db
- SHA256
  
  50cbe7e1ac258722c9ca2a96593ef18654ab54adb21523cfef83581747b3051b
- SHA512
  
  4fec9d42475b562a516283c4a40ceeeee7ffd655127ad90ac6f1e3da4587bc449d7a2e9a746bbb9bb884ffe3b0285de264d03e08cc6be9cbeae238000efa5069
- SSDEEP
  
  12288:hkgJSzrCEhwrC8yIJrlwgOW9xwMGwy0w7w4wJ+wwwZwb8bewf+HwddBlvK:hkgIPXR0gI7K
Score

10^/10

icedid 2399258081 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid2399258081bankerloadertrojan

behavioral2

icedid2399258081bankerloadertrojan