General

  • Target

    36c4efa4d8fe4b7d7e32099b9ac76b98ea5f0bd12556a312fead5d2900101c41

  • Size

    79KB

  • Sample

    210324-47bbahgj46

  • MD5

    ea6b5aa2e6db29756943b98b2f8a42c4

  • SHA1

    0027f3d1d1f8468ab4837af1698344b207fd3b84

  • SHA256

    36c4efa4d8fe4b7d7e32099b9ac76b98ea5f0bd12556a312fead5d2900101c41

  • SHA512

    ec6cdd50284f50e90d8ed77620f4d83a5ff3e5e99c9aa6841e8d8717799ee5c42efd1175419edaf058390af1a065be2c5a84d0f02ad8eae4fb4478c4feece6d0

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      36c4efa4d8fe4b7d7e32099b9ac76b98ea5f0bd12556a312fead5d2900101c41

    • Size

      79KB

    • MD5

      ea6b5aa2e6db29756943b98b2f8a42c4

    • SHA1

      0027f3d1d1f8468ab4837af1698344b207fd3b84

    • SHA256

      36c4efa4d8fe4b7d7e32099b9ac76b98ea5f0bd12556a312fead5d2900101c41

    • SHA512

      ec6cdd50284f50e90d8ed77620f4d83a5ff3e5e99c9aa6841e8d8717799ee5c42efd1175419edaf058390af1a065be2c5a84d0f02ad8eae4fb4478c4feece6d0

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks