Overview

overview

10

Static

static

Setup_Win_...13.exe

windows7-x64

10

Setup_Win_...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup_Win_18-01-2023_17-44-15.zip

  • Size

    971KB

  • Sample

    230118-ylyn1sda9t

  • MD5

    478057d87e40aef6a71453c27eb77649

  • SHA1

    6042bd527323c6288e6c9be94a125c9c02f6011e

  • SHA256

    7fa1fbd2c625269c408d515a7f7a2289e19f5f5d3cef46a96300212071215649

  • SHA512

    8d6915f768478b8c4f430e404d4561ea95ed544c612807e0c9f60af15757e6767c1bfa0d585cc5cd5600181dd564a4f086a4faa8c2c693ca61f169201aecbf81

  • SSDEEP

    6144:lbUfL0i+PajZFE9K9sv3H8dybHNuJw9MqR8I3v13jjJIAFef:yzSCZFEEs/I6tuO9MqRljjGAFef

Score
10/10
icedid3248465841bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

3248465841

C2

qsertopinajil.com

Targets

    • Target

      Setup_Win_18-01-2023_17-44-13.exe

    • Size

      700.4MB

    • MD5

      6718a804f5d5064fa3b918d844fd727d

    • SHA1

      16cfb4a72bd1c8e8f67a8a5687e118c3774f84f0

    • SHA256

      030e7b73e8d7bb187183f3087b8ec5756a8c71698f198754cf5299c86e044199

    • SHA512

      e739f4a7d59f7c68600c528cd5fc15f87ca148200331fae8f058d18640baadbf5fa1d45c3d884e249cab52256ebeddb3faecc1a51ddcc63c34be816ebc955bd0

    • SSDEEP

      6144:1zzkhbh8r2y6gudO7sBdvkJ5mXWboh4cd1gJkrW4MqR823v1djjJIAOV4Eq:1EhbGjyY7sncGXWbo3d9MqRnjjGAnR

    Score
    10/10
    icedid3248465841bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks