General

  • Target

    92c9a475c715ab4b5b183e52827ebf94ea51efbcaabd2f7aa042aca4fa890be0

  • Size

    79KB

  • Sample

    210324-ay5kytnhee

  • MD5

    bd9122d778616c86ea63b9ecd3b4c3bf

  • SHA1

    d7261c9b284b4e637c9c247131a79d22c08d7f9a

  • SHA256

    92c9a475c715ab4b5b183e52827ebf94ea51efbcaabd2f7aa042aca4fa890be0

  • SHA512

    7e95639fd78e9a5bd54b561facaf2d72c67ace7f9c34121bc4f029256cba798a6e8d6e73441f7c6dedf2323bc28b25fefee9abac8215654a78a22559491238e6

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      92c9a475c715ab4b5b183e52827ebf94ea51efbcaabd2f7aa042aca4fa890be0

    • Size

      79KB

    • MD5

      bd9122d778616c86ea63b9ecd3b4c3bf

    • SHA1

      d7261c9b284b4e637c9c247131a79d22c08d7f9a

    • SHA256

      92c9a475c715ab4b5b183e52827ebf94ea51efbcaabd2f7aa042aca4fa890be0

    • SHA512

      7e95639fd78e9a5bd54b561facaf2d72c67ace7f9c34121bc4f029256cba798a6e8d6e73441f7c6dedf2323bc28b25fefee9abac8215654a78a22559491238e6

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks