Overview

overview

10

Static

static

10

7944967034...5a.exe

windows7-x64

1

7944967034...5a.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22631afc7d9706f566995833748de97f.bin

  • Size

    3KB

  • MD5

    eebcf63836c566c097d43408f93f8bb4

  • SHA1

    0cdc61e295cc4badff12d650d4d1222ccacc661b

  • SHA256

    c76ee07d3e379201f628f7ad88708740c2feeb9cdaf26c79358adab8dc0cf498

  • SHA512

    7e06bdfbf689dea7778b0a883a6f310a97c76f119681b8099784530af9d3761b8980a516b832b21f0f2613a22795773d91e2b8de6a79499d5d2ec247533b685c

Score
10/10
loader507327483icedid

Malware Config

Extracted

Family

icedid

Botnet

507327483

C2

boldidiotruss.xyz

nizaoplov.xyz

153ishak.best

ilu21plane.xyz
Attributes
  • auth_var

    2

  • url_path

    /index.php

Signatures

  • IcedID Second Stage Loader 1 IoCs
    loader
  • Icedid family
    icedid
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22631afc7d9706f566995833748de97f.bin
    .zip

    Password: infected

  • 79449670340d763f164bbda0a32e38f3d06a2a3b6cee41d92c47f448710e015a.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    0e18f33408be6e4cb217f0266066c51c


    Headers

    Imports

    Sections