IcedID_10_26_2021

IcedID_10_26_2021
https://gist.github.com/myrtus0x0/5516350a936d8b7d123875638aabb7b8

IcedID Dropper: MOAR SMOKELOADER. Odds are this stems from cryptbot?
IcedID Dropper Analysis: https://tria.ge/211026-sqqajshgf7
IcedID Dropper URL: https://tria.ge/211022-ycdbqadaan

IcedID Loader Analysis: https://tria.ge/211026-sqqajshgf7
IcedID Staging Server: portedauthenticati.ink
IcedID Loader Project ID: 1892459423

IcedID Core Analysis: https://tria.ge/211026-tcjfhshhd3
IcedID Core C2s:
  - nnelforwfin.top
  - lakogrefop.rest
  - hangetilin.top
  - essaipienure.space
IcedID Core Project ID: 1217670233
IcedID Core URI: /posts/
IcedID Core Update C2s:
  - https://bafikalop.top/posts/
  - https://ependinilin.top/posts/
  - https://ransferlipfo.top/posts/
  - https://intonthsnstr.rest/posts/
  - https://bouncedsar.site/posts/
  - https://kiloveliks.club/posts/
  - https://sedefijiko.space/posts/
  - https://thesreiste.site/posts/