Overview

overview

10

Static

static

10

6fa0ea46cd...ed.exe

windows7-x64

10

6fa0ea46cd...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6865ca56665542cd7d5c1c53a76f32ca.bin

  • Size

    1.8MB

  • Sample

    230507-dgnyssaa5v

  • MD5

    8387fefd3f301af8fa750628aa253276

  • SHA1

    3d6671a23d39133810386a8968a1553d3145af4f

  • SHA256

    2154488682e7fa52945812b2e217fb68bba0bb1baafe02de905e6616f2b65c2f

  • SHA512

    bd7178b65e3e03ea4071e68b25120f899a809cb41ca11a683aab63303c20fc9b359483a612a786bd1a4c53c22df42e5b60b22116b6f765604b03d92d16c52049

  • SSDEEP

    49152:Ekd7b3J2BjqGyNS69bmS3hm4JLUdHUsvlAdV2:EkyyS69ZUldHgV2

Score
10/10
icedidmatiexteardropbackdoorbankerdropperkeyloggerloaderminerstealertrojan

Malware Config

Extracted

Family

icedid

Targets

    • Target

      6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed.exe

    • Size

      5.0MB

    • MD5

      6865ca56665542cd7d5c1c53a76f32ca

    • SHA1

      a8c9c66b632f5d2fda9d30f765ebc96ea4123c7a

    • SHA256

      6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed

    • SHA512

      ae134bb33333ebbed97acf52a67310b191fe03899bcb1948f3da3a89c04c9d00a892cd0f9190cfd4fef258719cc9f66c87e75bed2d87f9d342f9bb46d6f68505

    • SSDEEP

      49152:ptErfhsOSMa1xYus4Q2D2TgG6hN3gSVsmqoyeBe4:ptEbfa1xNL2g3mrEB/

    Score
    10/10
    icedidmatiexbankerkeyloggerloaderminerstealertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • Matiex

      Matiex is a keylogger and infostealer first seen in July 2020.

      stealerkeyloggermatiex

    • Matiex Main payload

    • Detectes Phoenix Miner Payload

      miner
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks