icedid | 07e6e23e6f347e83b64585bfcf14158dfffe42d20e577e41b55ac9423f0ccef6 | Triage

Sharing

General

Target

f35e0210905faf97ffaf574870eae764_JaffaCakes118
Size

294KB
Sample

240416-nak9faaf9w
MD5

f35e0210905faf97ffaf574870eae764
SHA1

4e9f5b3a4d354b8c0cbdaaf4eef419511fe2beec
SHA256

07e6e23e6f347e83b64585bfcf14158dfffe42d20e577e41b55ac9423f0ccef6
SHA512

fe57e9ed5f2f7a09935e672f0db82651a548ada5e4ece27726be8f0d9cfc5d9ffe57e401c10c40919cd83e7e06d34b0181ceecb522b851d407fa399f55da5b55
SSDEEP

3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKrR:Tz0nUFsV6Z/2ZwR7chpCJV/iSarR

Score

10^/10

icedid 3008954407 banker loader trojan

Malware Config

Extracted

Family

icedid

Campaign

3008954407

C2

zasertolofolom.top

Targets

- Target
  
  f35e0210905faf97ffaf574870eae764_JaffaCakes118
- Size
  
  294KB
- MD5
  
  f35e0210905faf97ffaf574870eae764
- SHA1
  
  4e9f5b3a4d354b8c0cbdaaf4eef419511fe2beec
- SHA256
  
  07e6e23e6f347e83b64585bfcf14158dfffe42d20e577e41b55ac9423f0ccef6
- SHA512
  
  fe57e9ed5f2f7a09935e672f0db82651a548ada5e4ece27726be8f0d9cfc5d9ffe57e401c10c40919cd83e7e06d34b0181ceecb522b851d407fa399f55da5b55
- SSDEEP
  
  3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKrR:Tz0nUFsV6Z/2ZwR7chpCJV/iSarR
Score

10^/10

icedid 3008954407 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid3008954407bankerloadertrojan

behavioral2

icedid3008954407bankerloadertrojan