Overview

overview

10

Static

static

10

2023-05-01...op.exe

windows7-x64

10

2023-05-01...op.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2023-05-01_db86067871fee95abb1e3abef8c35b54_icedid_satan_teardrop
  • Size 5.0MB
  • Sample230503-dv8kcsfd5s
  • SHA256 daed196b1b2af0ae801a06dd6e452f90f4163d53d261548064ffd57843a70ef9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
icedidmatiexteardropbackdoorbankerdropperkeyloggerloaderminerstealertrojan

Malware Config

Extracted

Family

  • icedid

Targets

    • Target
      2023-05-01_db86067871fee95abb1e3abef8c35b54_icedid_satan_teardrop
    • Size 5.0MB
    • SHA256 daed196b1b2af0ae801a06dd6e452f90f4163d53d261548064ffd57843a70ef9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    icedidmatiexbankerkeyloggerloaderminerstealertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Matiex

      Matiex is a keylogger and infostealer first seen in July 2020.

      stealerkeyloggermatiex

    • Matiex Main payload

    • Detectes Phoenix Miner Payload

      miner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks