Overview

overview

10

Static

static

1

Scan_Inv_0...82.exe

windows7-x64

10

Scan_Inv_0...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Scan_Inv_04_14#182.zip

  • Size

    327KB

  • Sample

    230414-szx2raad52

  • MD5

    814c1a98b5d704dba6747866bd9479f5

  • SHA1

    9bab93c9b4af46b2a9d9209c2ce2dc9acd787cc2

  • SHA256

    93a17e5f06f37e47c13f279dece7a84e58f5068f4e10efb73a981ecf18d266e1

  • SHA512

    a298d525545da15649fdac073bd86877f2adf3d0b044e4d59b237ad9819637a12d847e956d6997bcd58489cd5844f8eb41e7b32e750317b3722a963690ce8587

  • SSDEEP

    6144:Vh/D8UwOU1bN48bEg/HLDOk43OfprwxtLtYnYL+gYJFhQPDGa8tAUR6WBI:VhxUA0PLd4eBr+EPgYJFhFbtAUrI

Score
10/10
icedid997059431bankerloadertrojan

Malware Config

Extracted

Family

icedid

Campaign

997059431

C2

gintoonafa.com

Targets

    • Target

      Scan_Inv_04_14#182.exe

    • Size

      606KB

    • MD5

      14ff82941d613d69a93e758b3293a18a

    • SHA1

      190f9e42992277149b8ed15ebc939ae804d14688

    • SHA256

      b665306250d7f6ba89596bd331003b8e5d7a4d4c52d4bd55343b975808a6a00d

    • SHA512

      dcfd4b0c7bb28a578eae97b12ece3ec708de3e7aafe65265d89c7c5156059eee89c39d6dfe331085a256e21793429c9c9131cefcdbd64c4ad7d87258bd6255c5

    • SSDEEP

      12288:wH8lHtg1MJu879Yj3wraaW43fofL0OtBgUoHTuZgy7Z:wH8lHtg1Qu87aClgJ+HO

    Score
    10/10
    icedid997059431bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks