General

  • Target

    1ff403a6b7ebad8cf7154ed7bf471a1d.dll

  • Size

    52KB

  • Sample

    210324-evhcxdfg4n

  • MD5

    1ff403a6b7ebad8cf7154ed7bf471a1d

  • SHA1

    8426c37082ef8b5b4c993bf56aebffbeadd2e594

  • SHA256

    669734145b6ca8294486702af2be47d68f671b57830a6ebebf3dcca10bec961d

  • SHA512

    79f2ddfa9cedf9b1882ba2af381e4f476f786bd9b8a8a5bc44832b3392c68e64043a1faa64b71dd749a1cbc8b9c8f053c466b375c4ee50f04df2bd2b177c84c1

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      1ff403a6b7ebad8cf7154ed7bf471a1d.dll

    • Size

      52KB

    • MD5

      1ff403a6b7ebad8cf7154ed7bf471a1d

    • SHA1

      8426c37082ef8b5b4c993bf56aebffbeadd2e594

    • SHA256

      669734145b6ca8294486702af2be47d68f671b57830a6ebebf3dcca10bec961d

    • SHA512

      79f2ddfa9cedf9b1882ba2af381e4f476f786bd9b8a8a5bc44832b3392c68e64043a1faa64b71dd749a1cbc8b9c8f053c466b375c4ee50f04df2bd2b177c84c1

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks