General
- Target 2026-07-26_43ba6c4aec9204ce66c53831db120fa9_elex_icedid
- Size 6KB
- Sample260726-knp8rssard
- SHA256 9ded67886f46b063415aff5484d479fe3b8c5442f3ceb650f8f1533d6bde4d5f
- MD5 43ba6c4aec9204ce66c53831db120fa9
- SHA1 5e0fb4d34151aa12dc59e399e179fc9bfc3d9215
- SHA512 14d87df4410fbabd7e1dc297c678a45122bf014716cb406b4edb85abbf40097cbb8227203d91841d27cda170bc5a0cbe095e5063c737eb37d1a3c407a72c25f4
- SSDEEP 96:9qEESUUhDYXAybZACN3faaPCLi0/rlDXLeFX:9qr7UhcXAybZOLWwxDbG
- TLSH T161D12BD37D14A8B0F7CB84744A59362EE3F73615277018F289F348CAAA92A497879320
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-26_43ba6c4aec9204ce66c53831db120fa9_elex_icedid.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_43ba6c4aec9204ce66c53831db120fa9_elex_icedid.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
icedid
Botnet
-
146076989
C2
-
kostacardsplayer.pro
-
kostafootball.info
-
countrylandlords.info
-
landiscloudlord.red
Attributes
-
auth_var
1
-
url_path
/index.php
Targets
-
- Target 2026-07-26_43ba6c4aec9204ce66c53831db120fa9_elex_icedid
- Size 6KB
- SHA256 9ded67886f46b063415aff5484d479fe3b8c5442f3ceb650f8f1533d6bde4d5f
- MD5 43ba6c4aec9204ce66c53831db120fa9
- SHA1 5e0fb4d34151aa12dc59e399e179fc9bfc3d9215
- SHA512 14d87df4410fbabd7e1dc297c678a45122bf014716cb406b4edb85abbf40097cbb8227203d91841d27cda170bc5a0cbe095e5063c737eb37d1a3c407a72c25f4
- SSDEEP 96:9qEESUUhDYXAybZACN3faaPCLi0/rlDXLeFX:9qr7UhcXAybZOLWwxDbG
- TLSH T161D12BD37D14A8B0F7CB84744A59362EE3F73615277018F289F348CAAA92A497879320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10