General

  • Target

    da2d97e9fe0ec246493530cffbf20e765e8e879dd3b6ceec67b4e7d2966ad27f

  • Size

    65KB

  • Sample

    210324-88lqtp2m1x

  • MD5

    64b0ce74f83afd0d09bc4b005117c251

  • SHA1

    9145250e9ff6b39034ee800c44a7a42bb3c04d10

  • SHA256

    da2d97e9fe0ec246493530cffbf20e765e8e879dd3b6ceec67b4e7d2966ad27f

  • SHA512

    5df864b7d1ddc7608ffd252148a4246c4a5b727ea6ce3449c29a93d7778a0f3db7a76bc9b1d52c06db2f5b8c55a943ccfb61b307e7d4b7f3972eb26751381ecc

Malware Config

Extracted

Family

icedid

Campaign

3683573724

C2

24savetonnofmaoney.xyz

Targets

    • Target

      da2d97e9fe0ec246493530cffbf20e765e8e879dd3b6ceec67b4e7d2966ad27f

    • Size

      65KB

    • MD5

      64b0ce74f83afd0d09bc4b005117c251

    • SHA1

      9145250e9ff6b39034ee800c44a7a42bb3c04d10

    • SHA256

      da2d97e9fe0ec246493530cffbf20e765e8e879dd3b6ceec67b4e7d2966ad27f

    • SHA512

      5df864b7d1ddc7608ffd252148a4246c4a5b727ea6ce3449c29a93d7778a0f3db7a76bc9b1d52c06db2f5b8c55a943ccfb61b307e7d4b7f3972eb26751381ecc

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks