Overview

overview

10

Static

static

10

tmp6r1hawuh.exe

windows10-ltsc_2021-x64

10

tmp6r1hawuh.exe

windows10-2004-x64

10

tmp6r1hawuh.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp6r1hawuh
  • Size 8KB
  • Sample260524-s8fttsc17w
  • SHA256 c8830e11643138ab51f1385bb8bc8dabf796dd742f95e3dd3e48254d5f8916f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
icedid330912276bankerdiscoveryloadertrojan

Malware Config

Extracted

Family

  • icedid

Botnet

  • 330912276

C2

  • russalino.cyou

  • horisonship.cyou

Attributes
  • auth_var

    2

  • url_path

    /audio/

Targets

    • Target
      tmp6r1hawuh
    • Size 8KB
    • SHA256 c8830e11643138ab51f1385bb8bc8dabf796dd742f95e3dd3e48254d5f8916f5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    bankerdiscoveryicedidtrojan

    • Family: IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks