Overview

overview

10

Static

static

Setup_Win_...46.exe

windows7-x64

10

Setup_Win_...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup_Win_19-01-2023_17-34-48.zip

  • Size

    792KB

  • Sample

    230119-waeewsgg47

  • MD5

    9611e2142d1aa6792f97c8f4daa1ec38

  • SHA1

    ca3b687bd71277d81f1baee9f08286d1c7732e78

  • SHA256

    b0c1d323520821d5cb14ea42b06f12fce42e40f04266e73ec7015dc31adf8540

  • SHA512

    5781a9ad342005d8e71a0bb1e9cb41eee9fc748899a76d92cf45c37a7d392ac5f1f500debf8c2836e89704347ceb3a6a51503e91793303098e8fc85312270150

  • SSDEEP

    3072:aStPESYAeHgFtbhfJsCxIv9uPBglr1ROhlMDRdNZ2Ok:a8M/AFphfJFG9SBOROEdrZ2Ok

Score
10/10
icedid1420576768bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

1420576768

C2

plutoheadingo.com

Targets

    • Target

      Setup_Win_19-01-2023_17-34-46.exe

    • Size

      700.2MB

    • MD5

      dc57823d0b7175750e33537e8fa4544a

    • SHA1

      5183c79f65cfbbdc9968d48d4f7686fc3ef7115e

    • SHA256

      cf21b4f0015bb55c8d3e3ec0f2bd03f3eda615e4f38aca1caa6270cb5d52b239

    • SHA512

      35d12db8859527001dcb93db722898928b1fd3756e0b6e111328e1a2e6e0675332330bbd5301398f04b3c7c27751acbba08f1e1647b9d30c2bbd3923c6f3b4cd

    • SSDEEP

      3072:eYL6Tcr2SC+TneerVqkzGTx1HNWg++JW6pC5piSX7+iD08RbShuGZfSX:eYL6TE2S9TeeEkzk5NNHCrSsRQ6

    Score
    10/10
    icedid1420576768bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks