icedid | 79449670340d763f164bbda0a32e38f3d06a2a3b6cee41d92c47f448710e015a | Triage

Sharing

General

Target

unpacked_svchost.exe
Size

16KB
Sample

240328-trc72sae4z
MD5

22631afc7d9706f566995833748de97f
SHA1

f371c5f78437db887f1717b0eaf594295b0f4969
SHA256

79449670340d763f164bbda0a32e38f3d06a2a3b6cee41d92c47f448710e015a
SHA512

56e119dd3a4f0b9523d4cba4647333fb31e38af2456168c9a14f313e656e662dfdd70d9fec1d897bebc8ba91ab15cc3017651cf68d044e0b74f4f05960b69b82
SSDEEP

96:MMqEESUUhDYXAybZACN3fICtECLi0/r3mvuHg3:MMqr7UhcXAybZBrWwjM3

Score

10^/10

icedid 507327483 loader

Malware Config

Extracted

Family

icedid

Botnet

507327483

C2

boldidiotruss.xyz

nizaoplov.xyz

153ishak.best

ilu21plane.xyz

Attributes

auth_var
2
url_path
/index.php

Targets

- Target
  
  unpacked_svchost.exe
- Size
  
  16KB
- MD5
  
  22631afc7d9706f566995833748de97f
- SHA1
  
  f371c5f78437db887f1717b0eaf594295b0f4969
- SHA256
  
  79449670340d763f164bbda0a32e38f3d06a2a3b6cee41d92c47f448710e015a
- SHA512
  
  56e119dd3a4f0b9523d4cba4647333fb31e38af2456168c9a14f313e656e662dfdd70d9fec1d897bebc8ba91ab15cc3017651cf68d044e0b74f4f05960b69b82
- SSDEEP
  
  96:MMqEESUUhDYXAybZACN3fICtECLi0/r3mvuHg3:MMqr7UhcXAybZBrWwjM3
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

loader507327483icedid

behavioral1

behavioral2