General

  • Target

    18386371f416c2f57fa2a5c5bf5b5e4b.dll

  • Size

    79KB

  • Sample

    210324-23ymh31z8s

  • MD5

    18386371f416c2f57fa2a5c5bf5b5e4b

  • SHA1

    98f3ccf4b85245a44c0b5a7a4042c2d3778fac56

  • SHA256

    a9b1f7de849c6715dd659ce03d1e29fe0338c498f9fb867d1066ad7f53f4ff74

  • SHA512

    4028f280dec00766de01f62bc0f88dbddd611b55310a2eca66c47d64f61f9ac38f5790d16f314766868916534fcc32bc888ac2e510653f29b0eea11a176f4bc1

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      18386371f416c2f57fa2a5c5bf5b5e4b.dll

    • Size

      79KB

    • MD5

      18386371f416c2f57fa2a5c5bf5b5e4b

    • SHA1

      98f3ccf4b85245a44c0b5a7a4042c2d3778fac56

    • SHA256

      a9b1f7de849c6715dd659ce03d1e29fe0338c498f9fb867d1066ad7f53f4ff74

    • SHA512

      4028f280dec00766de01f62bc0f88dbddd611b55310a2eca66c47d64f61f9ac38f5790d16f314766868916534fcc32bc888ac2e510653f29b0eea11a176f4bc1

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks