icedid | 9b5498c5c240818198e2eea9d9b8dce18273ea24b167882c9efc030e2643f127 | Triage

Sharing

General

Target

9b5498c5c240818198e2eea9d9b8dce18273ea24b167882c9efc030e2643f127.exe
Size

12KB
Sample

240329-cy7lssfd5y
MD5

95e35564ed41b3eeb4db220baec91c41
SHA1

4c209f8b3c7684fc96c5d77c7b4f0ef896a40814
SHA256

9b5498c5c240818198e2eea9d9b8dce18273ea24b167882c9efc030e2643f127
SHA512

e07b43669dcb234a23b5189c272e2205596bdb80b73acc4aba82f12f20b94c0abc996a1f6d9bab7db0e1e78fc93132d6e9cdb4a2007fd5b680e9e33dbd1b4f4c
SSDEEP

96:MMqEESUUhDYXAybZACN3fICtECLi0/rxV+YVh:MMqr7UhcXAybZBrWw/+YVh

Score

10^/10

icedid 3061302936 loader

Malware Config

Extracted

Family

icedid

Botnet

3061302936

C2

certifacto.com

muratinue.com

bladisuka.red

cowspidzu.pro

Attributes

auth_var
2
url_path
/index.php

Targets

- Target
  
  9b5498c5c240818198e2eea9d9b8dce18273ea24b167882c9efc030e2643f127.exe
- Size
  
  12KB
- MD5
  
  95e35564ed41b3eeb4db220baec91c41
- SHA1
  
  4c209f8b3c7684fc96c5d77c7b4f0ef896a40814
- SHA256
  
  9b5498c5c240818198e2eea9d9b8dce18273ea24b167882c9efc030e2643f127
- SHA512
  
  e07b43669dcb234a23b5189c272e2205596bdb80b73acc4aba82f12f20b94c0abc996a1f6d9bab7db0e1e78fc93132d6e9cdb4a2007fd5b680e9e33dbd1b4f4c
- SSDEEP
  
  96:MMqEESUUhDYXAybZACN3fICtECLi0/rxV+YVh:MMqr7UhcXAybZBrWw/+YVh
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

loader3061302936icedid

behavioral1

behavioral2