Overview

overview

10

Static

static

10

icedID_payload.exe

windows7-x64

icedID_payload.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    icedID_payload.exe

  • Size

    6KB

  • MD5

    5333b6ac993080f860f120dcc1bafad4

  • SHA1

    2bdaafb608217f57c570dbca3248f082dc1e07ea

  • SHA256

    ba0ff225bb8678d36ab4e6aa0bdb2a7580d9460fdbdc85efa32cfff844b10369

  • SHA512

    634d2a864fb29281c5a9e5400ef642ea531b9ef4f35f98172ae3a159cbf3a1bf1775827ada2bc304ed0f46d3b8bdc04ed87484b9402056007988d8491a05fdb3

  • SSDEEP

    96:MMqEESUUhDYXAybZACN3fICtECLi0/r3mvuHg3:MMqr7UhcXAybZBrWwjM3

Score
10/10
loader507327483icedid

Malware Config

Extracted

Family

icedid

Botnet

507327483

C2

boldidiotruss.xyz

nizaoplov.xyz

153ishak.best

ilu21plane.xyz
Attributes
  • auth_var

    2

  • url_path

    /index.php

Signatures

  • IcedID Second Stage Loader 1 IoCs
    loader
  • Icedid family
    icedid

Files

  • icedID_payload.exe
    .exe windows x86

    0e18f33408be6e4cb217f0266066c51c


    Headers

    Imports

    Sections