Overview

overview

10

Static

static

3

tmp5_ka1q9e.exe

windows10-ltsc_2021-x64

10

tmp5_ka1q9e.exe

windows10-2004-x64

10

tmp5_ka1q9e.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp5_ka1q9e
  • Size 304KB
  • Sample260524-sdctpagv2n
  • SHA256 9e904d64207f0b2f7ac09e6b18b0f5e5c8cee33250713e59b6d7f2296d554b41
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
icedid4031737906bankerdiscoveryloadertrojan

Malware Config

Extracted

Family

  • icedid

Extracted

Family

  • icedid

Botnet

  • 4031737906

C2

  • fishofgloster.pw

  • newwildtuna.top

Attributes
  • auth_var

    3

  • url_path

    /audio/

Targets

    • Target
      tmp5_ka1q9e
    • Size 304KB
    • SHA256 9e904d64207f0b2f7ac09e6b18b0f5e5c8cee33250713e59b6d7f2296d554b41
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    banker4031737906discoveryicedidloadertrojan

    • Family: IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks