General

  • Target

    Runtime.brok2

  • Size

    154KB

  • Sample

    210313-hzndvsgz5e

  • MD5

    c386d9720b578d7390d474aff0857d80

  • SHA1

    4dc6fe015674fd5af318176e108e137a6d2ecee6

  • SHA256

    503eee9ef80021bf404dd5289ea47903732d5288ae286ca5814ebd25038ce6de

  • SHA512

    43c51d6cc4fd55c154a2e525c0012de1ba3171f32c75632fe651752521c83efbaf8ebd1db9c1cd472bbbe68ffa73992edd9d0ce3a0e64681a08edbe2c0698c9d

Malware Config

Extracted

Family

icedid

Campaign

2292720537

C2

klicjop9.fun

Targets

    • Target

      Runtime.brok2

    • Size

      154KB

    • MD5

      c386d9720b578d7390d474aff0857d80

    • SHA1

      4dc6fe015674fd5af318176e108e137a6d2ecee6

    • SHA256

      503eee9ef80021bf404dd5289ea47903732d5288ae286ca5814ebd25038ce6de

    • SHA512

      43c51d6cc4fd55c154a2e525c0012de1ba3171f32c75632fe651752521c83efbaf8ebd1db9c1cd472bbbe68ffa73992edd9d0ce3a0e64681a08edbe2c0698c9d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • PhotoLoader Payload

      IcedID downloder-Photloader.

MITRE ATT&CK Matrix

Tasks