General

  • Target

    045d3bd8e0cf58250e209d4c614fd9e7.dll

  • Size

    79KB

  • Sample

    210324-gqzd3g4nc6

  • MD5

    045d3bd8e0cf58250e209d4c614fd9e7

  • SHA1

    bcca6f0e1740c948606c583d33eb51895eca350d

  • SHA256

    257a3ba298a3e27845e2017e798d0b68a57379125540f213c089f1715549536b

  • SHA512

    45811958ae760f3a81bdc8774834d7d38809157f759157ec48dc81eeea4123fb70e430c56aa124042ad0bfa7546004a3bbe803eeb075f01bd8e8af4d8335553d

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      045d3bd8e0cf58250e209d4c614fd9e7.dll

    • Size

      79KB

    • MD5

      045d3bd8e0cf58250e209d4c614fd9e7

    • SHA1

      bcca6f0e1740c948606c583d33eb51895eca350d

    • SHA256

      257a3ba298a3e27845e2017e798d0b68a57379125540f213c089f1715549536b

    • SHA512

      45811958ae760f3a81bdc8774834d7d38809157f759157ec48dc81eeea4123fb70e430c56aa124042ad0bfa7546004a3bbe803eeb075f01bd8e8af4d8335553d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks