General

  • Target

    b7c70de6c0fb6a9de80b4d8d5fb14d952309b3ee63e5857475884b62f79bc03e

  • Size

    52KB

  • Sample

    210324-9qxherfcfa

  • MD5

    e5f43fff73e0c692842a00d4f0e33b98

  • SHA1

    5e89cd417ace29ae52d65dca3a088e3e1b311122

  • SHA256

    b7c70de6c0fb6a9de80b4d8d5fb14d952309b3ee63e5857475884b62f79bc03e

  • SHA512

    c1a96411b6d8324b1a126beb0acb60bf2eff15f2347a49eef8adf74e1c0ab4b809837afc610ae74162c7e1700151be18db9d5519e4d5d0cdde112134e3627575

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      b7c70de6c0fb6a9de80b4d8d5fb14d952309b3ee63e5857475884b62f79bc03e

    • Size

      52KB

    • MD5

      e5f43fff73e0c692842a00d4f0e33b98

    • SHA1

      5e89cd417ace29ae52d65dca3a088e3e1b311122

    • SHA256

      b7c70de6c0fb6a9de80b4d8d5fb14d952309b3ee63e5857475884b62f79bc03e

    • SHA512

      c1a96411b6d8324b1a126beb0acb60bf2eff15f2347a49eef8adf74e1c0ab4b809837afc610ae74162c7e1700151be18db9d5519e4d5d0cdde112134e3627575

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks