General

  • Target

    53a34e7fd06ad2cc72a585188a1c7a91508699419385655ff13bdfcfa93ed9e9

  • Size

    725KB

  • Sample

    201113-dk5f2nn5g2

  • MD5

    ea724cc8b37a2755a0adb286e517eecf

  • SHA1

    0a337e99a67a2e6e8d6e386de4c454c1baa558f7

  • SHA256

    53a34e7fd06ad2cc72a585188a1c7a91508699419385655ff13bdfcfa93ed9e9

  • SHA512

    04a6ca742718f1b3ce5ed499c7db8e8abdf97ead6aa0c3ea23b3ed9b9e4d0d7300c0c15243f2decf4ffa35441a35478b14beac417a2d067ae59e82889960cc29

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      53a34e7fd06ad2cc72a585188a1c7a91508699419385655ff13bdfcfa93ed9e9

    • Size

      725KB

    • MD5

      ea724cc8b37a2755a0adb286e517eecf

    • SHA1

      0a337e99a67a2e6e8d6e386de4c454c1baa558f7

    • SHA256

      53a34e7fd06ad2cc72a585188a1c7a91508699419385655ff13bdfcfa93ed9e9

    • SHA512

      04a6ca742718f1b3ce5ed499c7db8e8abdf97ead6aa0c3ea23b3ed9b9e4d0d7300c0c15243f2decf4ffa35441a35478b14beac417a2d067ae59e82889960cc29

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks