General

  • Target

    eeefa993a1d1bca0905796aba25bf4b4.dll

  • Size

    79KB

  • Sample

    210324-9rxpefnven

  • MD5

    eeefa993a1d1bca0905796aba25bf4b4

  • SHA1

    025f137d55e55c1d797d1885fedafae5c2317fab

  • SHA256

    4ad15bc9ec0efe437e66ed99091e809e528480eddcd49fe154c4048efe6acb5f

  • SHA512

    e44b80f361b50e50b4843d979e001d453e5d329e2b202838d38e4e63e3f28aac09fe0fc645b6e27ef56f0ba4e6cfebc8f585286f10f591a1b6839ca1e5cfb1ca

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      eeefa993a1d1bca0905796aba25bf4b4.dll

    • Size

      79KB

    • MD5

      eeefa993a1d1bca0905796aba25bf4b4

    • SHA1

      025f137d55e55c1d797d1885fedafae5c2317fab

    • SHA256

      4ad15bc9ec0efe437e66ed99091e809e528480eddcd49fe154c4048efe6acb5f

    • SHA512

      e44b80f361b50e50b4843d979e001d453e5d329e2b202838d38e4e63e3f28aac09fe0fc645b6e27ef56f0ba4e6cfebc8f585286f10f591a1b6839ca1e5cfb1ca

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks