Overview

overview

10

Static

static

3

9071660cee...e8.exe

windows7-x64

10

9071660cee...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ff97a53dfcd64583ea1417ae79f60676f7ebd904ba2894f4e3ac4952b1cc4d12

  • Size

    83KB

  • Sample

    241223-pxtprsznaq

  • MD5

    1e3bcc8969fe6db9fabf191e7c7a48fd

  • SHA1

    953d2251e6d796d3e89a9d1945a8b8b1c998e343

  • SHA256

    ff97a53dfcd64583ea1417ae79f60676f7ebd904ba2894f4e3ac4952b1cc4d12

  • SHA512

    ce932d211132c5d0e6a5e5f5aa8c80203c2e93fb060c4f958c1f4dda7b04dc1c165434dcd928086bfa45dc4b6795520bd39f2e98aa6a235ae7de11ce30e68073

  • SSDEEP

    1536:bwo0eD+jNZ7wP8SXuF4URcbGFuIQoYYrf5pQSGHhf+X8btbLQyWZO3/q:coBD8RwuybiDhYYxGHJ/btfyAPq

Score
10/10
icedid3274958461bankerdiscoveryloadertrojan

Malware Config

Extracted

Family

icedid

Botnet

3274958461

C2

fdelopoh.club

zedebobo.top

shmylvaro.pw

resonanse.cyou
Attributes
  • auth_var

    6

  • url_path

    /audio/

Extracted

Family

icedid

Targets

    • Target

      9071660cee4c6bdc30aecdbf6c742f0dae9bee34e34ccfa135186c01fcbe77e8

    • Size

      129KB

    • MD5

      d2275febf5f95a75a304ad2c13101f6d

    • SHA1

      ded0341441abfd1df46173645de06a480c5727ec

    • SHA256

      9071660cee4c6bdc30aecdbf6c742f0dae9bee34e34ccfa135186c01fcbe77e8

    • SHA512

      f1d5bfdadfac62b1e20b543ddacebd39ee589a0b33ab0ff52507afb858f278ec4338f88329a810e301b842f1b7e0b5f401f65a9f77b55ee89707a65741edd3a7

    • SSDEEP

      3072:sP1CwU+ufSfUerZO6chpzyaqmExutut+GF2R+fZ5CCBhCWd:A1CLaf1cmaqmut+GjCC+Wd

    Score
    10/10
    icedid3274958461bankerdiscoveryloadertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks