icedid | 4d90394ae1d4b4bf8c3581d8262537cfe821606d6452671d4706491e9a7a2efe | Triage

Sharing

General

Target

JaffaCakes118_4d90394ae1d4b4bf8c3581d8262537cfe821606d6452671d4706491e9a7a2efe
Size

395KB
Sample

241222-n6jqgsxpak
MD5

73d5f4b3783bb6f457c91f2bde662a35
SHA1

6505243ffd492457d8d4122e3eba110e1c8262fc
SHA256

4d90394ae1d4b4bf8c3581d8262537cfe821606d6452671d4706491e9a7a2efe
SHA512

20a727ca572510057c021c138929e310f66b3b286692252232308dee3e42e6ca3538567847c4eb3ac9835707a7f636e86db9dee760d586a733e6d10ef3694548
SSDEEP

12288:qjho/hKL8j1QRvGs6iY+hOAbQfcGLQgNe8:jZQRqiYATQfTQgNh

Score

10^/10

icedid 3121611028 banker core_loader trojan

Malware Config

Extracted

Family

icedid

Botnet

3121611028

C2

implementalyhiol.rest

floppyfgreed.fun

headwayndred.rest

dasreropolo.quest

Attributes

auth_var
6
url_path
/news/

Targets

- Target
  
  9ede53bb75e64701670f375308be92763f13065773e0b7778deada79967265f2
- Size
  
  755KB
- MD5
  
  cab5824842246db937c1c629dbcd3b25
- SHA1
  
  88d5698bed7b519aecfa689854f83e39ec951f34
- SHA256
  
  9ede53bb75e64701670f375308be92763f13065773e0b7778deada79967265f2
- SHA512
  
  12f2ebb6bf88a40ac33e203ffbc1e347d0c76c44cff1f51e340abb6b2084518ef2424aa4779fc509a780c4e586d12533ddc12f25ec9a757b60f510a5cdd2063f
- SSDEEP
  
  12288:FLxE864ouK8zU88Wes+iW9h4HObruBWo/0m9AGpXoY1gyUF52jug1D:FLxi4ouK8ANxh48CF0mGoXDCyUmCg1D
Score

10^/10

icedid 3121611028 banker core_loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Icedid family
  icedid
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid3121611028bankercore_loadertrojan

behavioral2

icedid3121611028bankercore_loadertrojan