General

  • Target

    17752d872e9ca1c8b6d7a995225af92e2a3842a50b0d635964da2c8d9d951dc4

  • Size

    65KB

  • Sample

    210324-2r42jfd5q2

  • MD5

    16d0992b8c4ecf804e23a376ef2d4d7f

  • SHA1

    3aa63b7d0bc6f90a78a43ffc92aa373a2fd96a78

  • SHA256

    17752d872e9ca1c8b6d7a995225af92e2a3842a50b0d635964da2c8d9d951dc4

  • SHA512

    4c7aa33ab34228024aa19c2a367f1f65174e558c578868c5bade54bdc45e188f3a89b1770a5da2328d9294570a98c6f87b1e0c8ed6988d26fa0ed1cea5651947

Malware Config

Extracted

Family

icedid

Campaign

3683573724

C2

24savetonnofmaoney.xyz

Targets

    • Target

      17752d872e9ca1c8b6d7a995225af92e2a3842a50b0d635964da2c8d9d951dc4

    • Size

      65KB

    • MD5

      16d0992b8c4ecf804e23a376ef2d4d7f

    • SHA1

      3aa63b7d0bc6f90a78a43ffc92aa373a2fd96a78

    • SHA256

      17752d872e9ca1c8b6d7a995225af92e2a3842a50b0d635964da2c8d9d951dc4

    • SHA512

      4c7aa33ab34228024aa19c2a367f1f65174e558c578868c5bade54bdc45e188f3a89b1770a5da2328d9294570a98c6f87b1e0c8ed6988d26fa0ed1cea5651947

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks