Overview

overview

10

Static

static

10

2024091999...id.exe

windows7-x64

3

2024091999...id.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    202409199995f1777fcc33eb013df36789baf46cicedid

  • Size

    8KB

  • Sample

    240919-w5swrstcmb

  • MD5

    9995f1777fcc33eb013df36789baf46c

  • SHA1

    c2b7b8ea258c3f57e29db4a89a354b6f047cfeef

  • SHA256

    c0f932a472fefd868d4d4bc324859a1d5a614258a957ec9e49d53089411af0f6

  • SHA512

    ac4a46d15c5c0e566712db32b7dbfe33c9844b57cdf3f7d4983950bb57013d34296b54fd1e4b5d0eedb138f0c333b35a8834244499e588bb76f5c2384918f8ca

  • SSDEEP

    96:/Oo6iJBvwj60QWwjijUhASao4CbvyCenVHiL4JMamhyhRl0V+N+OyIMD:/56iXvwj608jijUhR4CbvpSC0Ss9C5h

Score
10/10
icedid2800866022discoveryloader

Malware Config

Extracted

Family

icedid

Botnet

2800866022

C2

citytrallbus.xyz

cluebullet.best

mannycoder.top

kolobanga.press

freekolobanga.top

conspiracylegal.xyz
Attributes
  • auth_var

    10

  • url_path

    /audio/

Targets

    • Target

      202409199995f1777fcc33eb013df36789baf46cicedid

    • Size

      8KB

    • MD5

      9995f1777fcc33eb013df36789baf46c

    • SHA1

      c2b7b8ea258c3f57e29db4a89a354b6f047cfeef

    • SHA256

      c0f932a472fefd868d4d4bc324859a1d5a614258a957ec9e49d53089411af0f6

    • SHA512

      ac4a46d15c5c0e566712db32b7dbfe33c9844b57cdf3f7d4983950bb57013d34296b54fd1e4b5d0eedb138f0c333b35a8834244499e588bb76f5c2384918f8ca

    • SSDEEP

      96:/Oo6iJBvwj60QWwjijUhASao4CbvyCenVHiL4JMamhyhRl0V+N+OyIMD:/56iXvwj608jijUhR4CbvpSC0Ss9C5h

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks