MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 485ce80c6972762a04ff59597bdd71381688c73750e1dddae91ad33e8e6f01b8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


IcedID


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 485ce80c6972762a04ff59597bdd71381688c73750e1dddae91ad33e8e6f01b8
SHA3-384 hash: 1d629b4513d2c7f7595345c7fcc49d38d407098e4b1539af49aa3da10aef5586b429332b5d96d85b5f055bedb53520f2
SHA1 hash: b5616e8493bd77c73f95bad4e442360ab5abf4ed
MD5 hash: 08565af678a8f39bc7f6eda4f295c78d
humanhash: quiet-berlin-table-fish
File name:Fiapanfd.exe
Download: download sample
Signature IcedID
Create hunting rule
File size:2'408'448 bytes
First seen:2020-06-10 10:57:23 UTC
Last seen:2020-06-10 11:56:55 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash c98c102a969a869775e75a3f478c16d3 (2 x IcedID)
ssdeep 49152:23+67gUbJWkxh+VsE/8Rmz2x+zlKlw+K5+f73g:4Z7gUtxh+J8Rmz2xyKlw/E7
Threatray 880 similar samples on MalwareBazaar
TLSH 95B58D227CA08577C17303355D4EF27837BEAE684B24864B26D03F1CBE7526316696AF
Reporter JAMESWT_WT
Tags:IcedID

Intelligence

File Origin
# of uploads :
2
# of downloads :
114
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Razy.681475.14588.22915.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Worm.Cridex
Create hunting rule
Status:
Malicious
First seen:
2020-06-09 08:04:35 UTC
File Type:
PE (Exe)
Extracted files:
18
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Verdict:
malicious
Label(s):
gozi
Create hunting rule
icedid
Create hunting rule
Similar samples:
341621050c83b242a1779e5a88f4c6389b7efc1406d5e5ba8e7828a0d74fbb86
IcedID
4438467f45eedf09a6ddf01129a914bd3846bc7771bc15bfb512b85337b5d108
IcedID
5bc0e27e86d9a4d5e7005669c12b97b56a42ac17fb5cc93de24f38527b5e97e1
IcedID
648fa862ce3d2230c2754a31f45d20b74f70d8648a9ad5897ba0d6a35627b592
IcedID
75195784a153205aad34eea77c000358081fd1e1c8abab6e532b2ae8e983c44b
IcedID
8ce3415cbd2d4a9345a47b937a7af1eec4388d0e673ce7c701df043105b5134f
IcedID
9ad02a119c0df3fb652557b2b5c3136a3fb7f80e78774f1bffd5237eb2d9a514
IcedID
d748a00416baf3e4e5bf0a4e8312cd9c88872a6ab594628d7ff6d206e6705322
IcedID
f9e63320c3a3c14847155de9abdbbf38e44866500402d8985312d92f149df23b
IcedID
fd9ed4c7107c4fb86d348d13f7e6c3b6c23e6c12084adc45ddfef4bc2ef2fbaf
IcedID
+ 870 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-s7g7vblzks/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments