Overview

overview

10

Static

static

10

tmpwlrazfu1.exe

windows10-ltsc_2021-x64

3

tmpwlrazfu1.exe

windows10-2004-x64

3

tmpwlrazfu1.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpwlrazfu1
  • Size 8KB
  • Sample260601-stsj3shs3t
  • SHA256 56af2cc67fca43f8769b4a26854d14724be5cbbc86c6b582f069352c37f2dc1e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
icedid451030560bankerdiscoveryloadertrojan

Malware Config

Extracted

Family

  • icedid

Botnet

  • 451030560

C2

  • tanksprunks.co

  • geliopeople.cyou

  • menmengogo.shop

  • kisslolo.shop

Attributes
  • auth_var

    2

  • url_path

    /audio/

Targets

    • Target
      tmpwlrazfu1
    • Size 8KB
    • SHA256 56af2cc67fca43f8769b4a26854d14724be5cbbc86c6b582f069352c37f2dc1e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks