Overview

overview

10

Static

static

10

7944967034...5a.exe

windows7-x64

1

7944967034...5a.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ab73bef256575a13e3392077a713bcb7c3eba2dfcb6878990c02d18afebbffb

  • Size

    3KB

  • MD5

    24ee8166b5bcbbe7178be46f4709688c

  • SHA1

    7cab97ba8bb74ae4d54bca9a0cec05bd42a8c4ea

  • SHA256

    7ab73bef256575a13e3392077a713bcb7c3eba2dfcb6878990c02d18afebbffb

  • SHA512

    a9e9e90889e78080b34946d6b189b7d2f76d92852b6b23302c046981ffedf299deb7afd3084ab60031034931a0a1372df75481e5f40b20477f7f55b944c4a627

Score
10/10
loader507327483icedid

Malware Config

Extracted

Family

icedid

Botnet

507327483

C2

boldidiotruss.xyz

nizaoplov.xyz

153ishak.best

ilu21plane.xyz
Attributes
  • auth_var

    2

  • url_path

    /index.php

Signatures

  • IcedID Second Stage Loader 1 IoCs
    loader
  • Icedid family
    icedid
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ab73bef256575a13e3392077a713bcb7c3eba2dfcb6878990c02d18afebbffb
    .zip

    Password: infected

  • 79449670340d763f164bbda0a32e38f3d06a2a3b6cee41d92c47f448710e015a.exe
    .exe windows:5 windows x86 arch:x86

    0e18f33408be6e4cb217f0266066c51c


    Headers

    Imports

    Sections