icedid | 4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

JaffaCakes...64.dll

windows7-x64

JaffaCakes...64.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64
Size

490KB
Sample

241222-wb74lavncl
MD5

612dda4a9f57d84e0e01b33c667b052b
SHA1

b8422fe8755d72a6a2846a617ad5dd7813b11a5f
SHA256

4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64
SHA512

b70a9fb77789369476e643bf1feda6c7721ea70b37b3c24171b0c5934897c55b427cbb404a930ed98bdb285bc6b79e4e3bf2c62a6ce6d07818d5cac4a62e1b6d
SSDEEP

12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRA:knmj6xK1y3Ik6TZGRA

Score

10^/10

icedid 3467965077 banker loader trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64.dll

Resource

win7-20240903-en

icedid 3467965077 banker loader trojan

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64.dll

Resource

win10v2004-20241007-en

icedid 3467965077 banker loader trojan

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

- Target
  
  JaffaCakes118_4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64
- Size
  
  490KB
- MD5
  
  612dda4a9f57d84e0e01b33c667b052b
- SHA1
  
  b8422fe8755d72a6a2846a617ad5dd7813b11a5f
- SHA256
  
  4e03060c02912ee6d83cb43fb6fc640dd82cdc6ba72fcac1a18b4900d6ba1f64
- SHA512
  
  b70a9fb77789369476e643bf1feda6c7721ea70b37b3c24171b0c5934897c55b427cbb404a930ed98bdb285bc6b79e4e3bf2c62a6ce6d07818d5cac4a62e1b6d
- SSDEEP
  
  12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRA:knmj6xK1y3Ik6TZGRA
Score

10^/10

icedid 3467965077 banker loader trojan
- IcedID, BokBot
  IcedID is a banking trojan capable of stealing credentials.
  trojan banker icedid
- Icedid family
  icedid
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

icedid3467965077bankerloadertrojan

behavioral2

icedid3467965077bankerloadertrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.