Overview

overview

10

Static

static

10

2023-04-27...op.exe

windows7-x64

10

2023-04-27...op.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop.exe

  • Size

    5.0MB

  • Sample

    230428-y2pfaaaa8z

  • MD5

    6865ca56665542cd7d5c1c53a76f32ca

  • SHA1

    a8c9c66b632f5d2fda9d30f765ebc96ea4123c7a

  • SHA256

    6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed

  • SHA512

    ae134bb33333ebbed97acf52a67310b191fe03899bcb1948f3da3a89c04c9d00a892cd0f9190cfd4fef258719cc9f66c87e75bed2d87f9d342f9bb46d6f68505

  • SSDEEP

    49152:ptErfhsOSMa1xYus4Q2D2TgG6hN3gSVsmqoyeBe4:ptEbfa1xNL2g3mrEB/

Score
10/10
icedidmatiexteardropbackdoorbankerdropperkeyloggerloaderminerstealertrojan

Malware Config

Extracted

Family

icedid

Targets

    • Target

      2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop.exe

    • Size

      5.0MB

    • MD5

      6865ca56665542cd7d5c1c53a76f32ca

    • SHA1

      a8c9c66b632f5d2fda9d30f765ebc96ea4123c7a

    • SHA256

      6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed

    • SHA512

      ae134bb33333ebbed97acf52a67310b191fe03899bcb1948f3da3a89c04c9d00a892cd0f9190cfd4fef258719cc9f66c87e75bed2d87f9d342f9bb46d6f68505

    • SSDEEP

      49152:ptErfhsOSMa1xYus4Q2D2TgG6hN3gSVsmqoyeBe4:ptEbfa1xNL2g3mrEB/

    Score
    10/10
    icedidmatiexbankerkeyloggerloaderminerstealertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Matiex

      Matiex is a keylogger and infostealer first seen in July 2020.

      stealerkeyloggermatiex

    • Matiex Main payload

    • Detectes Phoenix Miner Payload

      miner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks