General

  • Target

    e40ec3122fbfe0361dbdc41a7d36bc2684b26ad1b3e6a0d76fbacc5032005157

  • Size

    672KB

  • Sample

    201113-hlajg614q6

  • MD5

    1f12b7ea6fc90fd4ebba7f51925a219d

  • SHA1

    78980cea068260c0a7423bf0a377f112b518a9aa

  • SHA256

    e40ec3122fbfe0361dbdc41a7d36bc2684b26ad1b3e6a0d76fbacc5032005157

  • SHA512

    d588d30a82a77ce0e404a4907f74420931c2f46bf6bf0fa0ad011466e6123a8742d3d00121c02244627f66919ad60d0cff0eaf9156421c7c8f363cce00b21613

Malware Config

Extracted

Family

icedid

C2

kostacardsplayer.pro

kostafootball.info

countrylandlords.info

landiscloudlord.red

Targets

    • Target

      e40ec3122fbfe0361dbdc41a7d36bc2684b26ad1b3e6a0d76fbacc5032005157

    • Size

      672KB

    • MD5

      1f12b7ea6fc90fd4ebba7f51925a219d

    • SHA1

      78980cea068260c0a7423bf0a377f112b518a9aa

    • SHA256

      e40ec3122fbfe0361dbdc41a7d36bc2684b26ad1b3e6a0d76fbacc5032005157

    • SHA512

      d588d30a82a77ce0e404a4907f74420931c2f46bf6bf0fa0ad011466e6123a8742d3d00121c02244627f66919ad60d0cff0eaf9156421c7c8f363cce00b21613

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks