Overview

overview

10

Static

static

10

20230501db...op.exe

windows7-x64

10

20230501db...op.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    20230501db86067871fee95abb1e3abef8c35b54icedidsatanteardrop
  • Size 5.0MB
  • Sample230507-adaefscg3t
  • SHA256 daed196b1b2af0ae801a06dd6e452f90f4163d53d261548064ffd57843a70ef9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
icedidmatiexteardropbackdoorbankerdropperkeyloggerloaderminerstealertrojan

Malware Config

Extracted

Family

  • icedid

Targets

    • Target
      20230501db86067871fee95abb1e3abef8c35b54icedidsatanteardrop
    • Size 5.0MB
    • SHA256 daed196b1b2af0ae801a06dd6e452f90f4163d53d261548064ffd57843a70ef9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    icedidmatiexbankerkeyloggerloaderminerstealertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Matiex

      Matiex is a keylogger and infostealer first seen in July 2020.

      stealerkeyloggermatiex

    • Matiex Main payload

    • Detectes Phoenix Miner Payload

      miner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks