icedid | 0cae01ffecfcb086909dc84463712224d381a40f8908e40053763073fb011b9a | Triage

Sharing

General

Target

171ebaf6e9e975313e68ff5d9bc155b8de68a4ba
Size

242KB
Sample

221007-aemfeabdbl
MD5

d76b51c7be4f4b7f5fd3f273f535e8e8
SHA1

171ebaf6e9e975313e68ff5d9bc155b8de68a4ba
SHA256

0cae01ffecfcb086909dc84463712224d381a40f8908e40053763073fb011b9a
SHA512

2fed24dceadc429438c693dde6502fa22bd397c58dad5bfca80ad586ce0b441718e2f9a0875c3d608ff3ed7a447287789c414eaf8fbe8f82c881fecf84959ca4
SSDEEP

6144:+Y3wWXXYay5YLFLkes3tuiJXwtXibYmFzOyMFKQX+S:j1pPLFAesdx597FIX+

Score

10^/10

icedid 3539145315 banker loader trojan

Malware Config

Extracted

Family

icedid

Campaign

3539145315

C2

abegelkunic.com

Targets

- Target
  
  171ebaf6e9e975313e68ff5d9bc155b8de68a4ba
- Size
  
  242KB
- MD5
  
  d76b51c7be4f4b7f5fd3f273f535e8e8
- SHA1
  
  171ebaf6e9e975313e68ff5d9bc155b8de68a4ba
- SHA256
  
  0cae01ffecfcb086909dc84463712224d381a40f8908e40053763073fb011b9a
- SHA512
  
  2fed24dceadc429438c693dde6502fa22bd397c58dad5bfca80ad586ce0b441718e2f9a0875c3d608ff3ed7a447287789c414eaf8fbe8f82c881fecf84959ca4
- SSDEEP
  
  6144:+Y3wWXXYay5YLFLkes3tuiJXwtXibYmFzOyMFKQX+S:j1pPLFAesdx597FIX+
Score

10^/10

icedid 3539145315 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Blocklisted process makes network request
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid3539145315bankerloadertrojan