Overview

overview

10

Static

static

10

20240919b0...id.exe

windows7-x64

3

20240919b0...id.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240919b096df5d5d6776011b19491e29a31f9eicedid

  • Size

    10KB

  • Sample

    240919-w6l5lstcqd

  • MD5

    b096df5d5d6776011b19491e29a31f9e

  • SHA1

    5ad63cf0b50e264ee628b16d3f104bebc40d8595

  • SHA256

    132756a53c4cf88cbf64ca1e900bf897940cc5038787eb899935ca7097372788

  • SHA512

    e5d8cb3ea4d18cd1f891f1ac43bdda787adf763339846b3920e54659253964aabf855a0d8e016908f82e9ef843251b672bb086baa9ce7164357a3adb12b652bc

  • SSDEEP

    96:/Oo6iJBvwj60QWwjijUhASao4CbvyCenVHiL4JMamhyhRl0V+N+OyIMD:/56iXvwj608jijUhR4CbvpSC0Ss9C5h

Score
10/10
icedid2800866022discoveryloader

Malware Config

Extracted

Family

icedid

Botnet

2800866022

C2

citytrallbus.xyz

cluebullet.best

mannycoder.top

kolobanga.press

freekolobanga.top

conspiracylegal.xyz
Attributes
  • auth_var

    10

  • url_path

    /audio/

Targets

    • Target

      20240919b096df5d5d6776011b19491e29a31f9eicedid

    • Size

      10KB

    • MD5

      b096df5d5d6776011b19491e29a31f9e

    • SHA1

      5ad63cf0b50e264ee628b16d3f104bebc40d8595

    • SHA256

      132756a53c4cf88cbf64ca1e900bf897940cc5038787eb899935ca7097372788

    • SHA512

      e5d8cb3ea4d18cd1f891f1ac43bdda787adf763339846b3920e54659253964aabf855a0d8e016908f82e9ef843251b672bb086baa9ce7164357a3adb12b652bc

    • SSDEEP

      96:/Oo6iJBvwj60QWwjijUhASao4CbvyCenVHiL4JMamhyhRl0V+N+OyIMD:/56iXvwj608jijUhR4CbvpSC0Ss9C5h

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks