General

  • Target

    f4dee6acb1e449c6fffbc649e4db881e56e4cdee0dd738a6be6fc6fb2e870e3d

  • Size

    79KB

  • Sample

    210324-dgqv5v1jxa

  • MD5

    d032cd6d252d3424590f782eee582120

  • SHA1

    95d95bf6c28707d7db349082ea0cedf7ddda170d

  • SHA256

    f4dee6acb1e449c6fffbc649e4db881e56e4cdee0dd738a6be6fc6fb2e870e3d

  • SHA512

    87744e25bbeb1a222494bc976866d79333efbc4b3cbf8e2155c3c292459d8b52e36ad644316136ffbeafd798b5f6da3f198b77018b4548273f54cd29cb9b0a19

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      f4dee6acb1e449c6fffbc649e4db881e56e4cdee0dd738a6be6fc6fb2e870e3d

    • Size

      79KB

    • MD5

      d032cd6d252d3424590f782eee582120

    • SHA1

      95d95bf6c28707d7db349082ea0cedf7ddda170d

    • SHA256

      f4dee6acb1e449c6fffbc649e4db881e56e4cdee0dd738a6be6fc6fb2e870e3d

    • SHA512

      87744e25bbeb1a222494bc976866d79333efbc4b3cbf8e2155c3c292459d8b52e36ad644316136ffbeafd798b5f6da3f198b77018b4548273f54cd29cb9b0a19

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks