icedid | bafe521bb890f386719fb26ac9a990f56fd25bab7d97ae57cd27a21ae42d646e | Triage

Submit
Reports

Overview

overview

Static

static

3

1131cf6447...0N.exe

windows7-x64

1131cf6447...0N.exe

windows10-2004-x64

Sharing

General

Target

1131cf6447ffb67033749c5aa896d560N
Size

685KB
Sample

240908-q1m7tsygmq
MD5

1131cf6447ffb67033749c5aa896d560
SHA1

7068641f635ca06c3c7514f7db422b53fc44393a
SHA256

bafe521bb890f386719fb26ac9a990f56fd25bab7d97ae57cd27a21ae42d646e
SHA512

3a1c3cf4d7c96140cf9d5a931b1193535e4a7690b625f22ca18d96813e3bdfe9258a241944361288706f6454b9217210d2c47f1a225f72b7b9136ee47b497fb0
SSDEEP

12288:1+qZeZwyILgZi6YZmX/JHqJtiVFyXObiXTp3n:4uLgZPxxHhEXWiTt

Score

10^/10

icedid 146076989 banker discovery loader trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1131cf6447ffb67033749c5aa896d560N.exe

Resource

win7-20240708-en

icedid 146076989 banker discovery loader trojan

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

1131cf6447ffb67033749c5aa896d560N.exe

Resource

win10v2004-20240802-en

icedid 146076989 banker discovery loader trojan

windows10-2004-x64

4 signatures

120 seconds

Malware Config

Extracted

Family

icedid

Botnet

146076989

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Attributes

auth_var
1
url_path
/index.php

Extracted

Family

icedid

Targets

- Target
  
  1131cf6447ffb67033749c5aa896d560N
- Size
  
  685KB
- MD5
  
  1131cf6447ffb67033749c5aa896d560
- SHA1
  
  7068641f635ca06c3c7514f7db422b53fc44393a
- SHA256
  
  bafe521bb890f386719fb26ac9a990f56fd25bab7d97ae57cd27a21ae42d646e
- SHA512
  
  3a1c3cf4d7c96140cf9d5a931b1193535e4a7690b625f22ca18d96813e3bdfe9258a241944361288706f6454b9217210d2c47f1a225f72b7b9136ee47b497fb0
- SSDEEP
  
  12288:1+qZeZwyILgZi6YZmX/JHqJtiVFyXObiXTp3n:4uLgZPxxHhEXWiTt
Score

10^/10

icedid 146076989 banker discovery loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- IcedID Second Stage Loader
  loader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

icedid146076989bankerdiscoveryloadertrojan

behavioral2

icedid146076989bankerdiscoveryloadertrojan

© 2018-2024

Terms | Privacy