General

  • Target

    e90adc56990de015caebe546eecd241ac3b1ad36a2495aa94c923bdd0bbb1d0a

  • Size

    781KB

  • Sample

    201109-kwbf397x86

  • MD5

    aa0425f66889972c283344cc571b8927

  • SHA1

    cdf991b2dc4770ddba13f07e5d478818dca61d40

  • SHA256

    e90adc56990de015caebe546eecd241ac3b1ad36a2495aa94c923bdd0bbb1d0a

  • SHA512

    6b4fccc07e8bdc53dca6f2df83f004e1f679aa501dd1ce0ad507662ba9f390a9cf42065ab00065909e241cfc039aacf0c1daebf2bcb2d116dc32bf5e9dfba55c

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      e90adc56990de015caebe546eecd241ac3b1ad36a2495aa94c923bdd0bbb1d0a

    • Size

      781KB

    • MD5

      aa0425f66889972c283344cc571b8927

    • SHA1

      cdf991b2dc4770ddba13f07e5d478818dca61d40

    • SHA256

      e90adc56990de015caebe546eecd241ac3b1ad36a2495aa94c923bdd0bbb1d0a

    • SHA512

      6b4fccc07e8bdc53dca6f2df83f004e1f679aa501dd1ce0ad507662ba9f390a9cf42065ab00065909e241cfc039aacf0c1daebf2bcb2d116dc32bf5e9dfba55c

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks