Overview

overview

10

Static

static

3

abe866ba9e...03.exe

windows7-x64

10

abe866ba9e...03.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8971f46f2e0808213ea577dc9978e94

  • Size

    135KB

  • Sample

    240320-mnlxfsef69

  • MD5

    d8971f46f2e0808213ea577dc9978e94

  • SHA1

    41d3c21ac604d42793e0a1a97d15aa519463d74a

  • SHA256

    63692f8532a6b1c1e78c51d96842e7c90a841a9afe76c9d71beb2ca5bfc0bfa5

  • SHA512

    52351c0d167f87f1fa1048bd94b02b57e5357a0a1695304393de7bba62a0b919d840a5c09a19a6b083116330fabb0e8ae9f5c53a5f827954f63b168d3d691f17

  • SSDEEP

    3072:i1UcQjSCbuBW50LDp6RMKy6X6BQ447bH4izT0/uRjRJH:E63bV50LsY6K874IFnH

Score
10/10
icedid3169317434bankerloadertrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

3169317434

C2

kodjakskoda.club

financesromma.club

slobrewelo.pw

nifrittilo.pw
Attributes
  • auth_var

    4

  • url_path

    /audio/

Targets

    • Target

      abe866ba9e8a9956a64ef4bc48ace783daa30d51b86fa60adfbb6d8fa044c503

    • Size

      240KB

    • MD5

      3fbcd911c5616182a5ced7f40fdfa28f

    • SHA1

      690e6e312df91174f1d13dce26c48abab7d74c96

    • SHA256

      abe866ba9e8a9956a64ef4bc48ace783daa30d51b86fa60adfbb6d8fa044c503

    • SHA512

      7dfd43197a4dc3770fb09d8979c3edb394cff72e0c4854ca1a2f98c05ae00e85854469c66327eb71facbf0099bec1a8880e041105c2ab455c0d1aec2541b1d0a

    • SSDEEP

      3072:DiqtOMuSsObf0BJ9Ao3B1I8J9RMOy5uY1dbrwubD9a4ojnzHypsdmDrzyf/Ea:DdDGObsuoR1I29RM3uHyydmD3I

    Score
    10/10
    icedid3169317434bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks