Overview

overview

10

Static

static

1

Setup_Win_...14.exe

windows7-x64

10

Setup_Win_...14.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup_Win_13-02-2023_16-33-14.rar

  • Size

    124KB

  • Sample

    230214-peq6xscf2v

  • MD5

    c3e3cd8d4b637772580a9db31c2beb49

  • SHA1

    156bc239b85b74799e96629b3a1b41f78c45164c

  • SHA256

    a40bfbcfe67cfe4b2db3f7b7254a28a54847f3a82ebeffafd6ad8456d2605075

  • SHA512

    f5ab6495c8d16e14d1cc6544ff8adffbaadb1b65dfcb817fa0396928cc65666d18d53a18ac8ddfe24d53cd4d26245686c0ceda18904f97f5be0e030f47b0a7a6

  • SSDEEP

    3072:roUimDiCnN8NNqFCya5VNcUqHqh0N1DV8:roU9pWqQ5VNcU/0jDV8

Score
10/10
icedid2076641214bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

2076641214

C2

alishabrindeader.com

Targets

    • Target

      Setup_Win_13-02-2023_16-33-14.exe

    • Size

      708.3MB

    • MD5

      7327fb493431fa390203c6003bd0512f

    • SHA1

      1b2da3d17e88dba864a53350a0e24e9e96458a2e

    • SHA256

      68fcd0ef08f5710071023f45dfcbbd2f03fe02295156b4cbe711e26b38e21c00

    • SHA512

      fb5783494535b3b99ea1ceec071723334a3a4166ea566912fb01fd33df54ffd6c8777a53a43e3209a8c46830cf8ded274a4675fab4d6c56d64431a0bd0916590

    • SSDEEP

      3072:nbRlETFNpVR3utDFr0IiYimbUAEG6aOyYYNqGHY7MZa2LaE60:bCdei1aUA16ajKMz

    Score
    10/10
    icedid2076641214bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks