Overview

overview

10

Static

static

Setup_Win_...32.exe

windows7-x64

10

Setup_Win_...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup_Win_01-02-2023_19-15-33.zip

  • Size

    922KB

  • Sample

    230201-x53lmsbe73

  • MD5

    1bc191ce31861ce56280eab0ea174cba

  • SHA1

    2313e53237adc4f019a4803076bc57cbc8711217

  • SHA256

    6a4bb9025abd30e0bda06417220a199163e084329c073633f877df3bd04b8a5b

  • SHA512

    acfcbe3d6c4847506b4f42f0fed8758eed37420d803673727e3c111bf928e591b9651a891e4b4056a6a4a2a060066db4dc130d79cf6ef9154056914081e9bf1e

  • SSDEEP

    6144:kgktMgO/XjWeZYn58USIOi1cDh5ZZ4f4egQF9Ad:kPtMgOPjvYn5nncDhuuo92

Score
10/10
icedid133894510bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

133894510

C2

restorahlith.com

Targets

    • Target

      Setup_Win_01-02-2023_19-15-32.exe

    • Size

      703.6MB

    • MD5

      6cbde073325643ca47db033c54220b7e

    • SHA1

      9e5c6cb72fd1d6b3e1f8b75af36c77693c244a1e

    • SHA256

      69dca2c763b58892a8a7ce5583f8ade2cd566f676727cdafe999635dcd6071eb

    • SHA512

      e5cf6608d7a80437add54192db9759057c48e1502213543d3298e3d7a109d8b4ab7796460cc8fa6df1f42529db110ef4b2f034293f57b7c09db35faa439de5f9

    • SSDEEP

      12288:o41EwgLoMgUh2W2kRSkWzgVz6iW8fPmniuwiC:XEwgL/gUEW2kRSkWzgVz6l0+iuwF

    Score
    10/10
    icedid133894510bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks