Overview

overview

10

Static

static

SetupWin01...18.exe

windows7-x64

10

SetupWin01...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SetupWin01-02-202317-10-18.exe

  • Size

    649KB

  • Sample

    230201-wlvk9aba98

  • MD5

    36b89900c9300156d4ba6e19742c7498

  • SHA1

    2c889cf43e2b0e162ddb2ac9567b1ee3507f9f88

  • SHA256

    3a585be7037b0dd24dbc719e8a05d1a1502108bb6e0fea62d6b90980be75a7d9

  • SHA512

    413e556a825d2342d4b0a364116c43953f1aa362193e2c8b98235856be26ccb9763abd89112b38d39fbc1f4020fdd2f95a581b4e26693f1cf245428688e8d2bb

  • SSDEEP

    12288:o41EwgLoMgUh2W2kRSkWzgVz6iW8fPmniuwiC:XEwgL/gUEW2kRSkWzgVz6l0+iuwF

Score
10/10
icedid133894510bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

133894510

C2

restorahlith.com

Targets

    • Target

      SetupWin01-02-202317-10-18.exe

    • Size

      649KB

    • MD5

      36b89900c9300156d4ba6e19742c7498

    • SHA1

      2c889cf43e2b0e162ddb2ac9567b1ee3507f9f88

    • SHA256

      3a585be7037b0dd24dbc719e8a05d1a1502108bb6e0fea62d6b90980be75a7d9

    • SHA512

      413e556a825d2342d4b0a364116c43953f1aa362193e2c8b98235856be26ccb9763abd89112b38d39fbc1f4020fdd2f95a581b4e26693f1cf245428688e8d2bb

    • SSDEEP

      12288:o41EwgLoMgUh2W2kRSkWzgVz6iW8fPmniuwiC:XEwgL/gUEW2kRSkWzgVz6l0+iuwF

    Score
    10/10
    icedid133894510bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks