General

  • Target

    c1dc5568cc35eb29ddd0584354906b50.dll

  • Size

    79KB

  • Sample

    210324-hmszd2kp4x

  • MD5

    c1dc5568cc35eb29ddd0584354906b50

  • SHA1

    cc3eeb97d572b05e3b99c49577c890f6bb2809a0

  • SHA256

    6c98f6a695302a4a1477eddd22c5524c6bb766b6be905379c5e8a841f83b0af6

  • SHA512

    6b4930e3e55330ca8aa5862b7633da21a29dec29d81280fd59c91790e47caf9f80f4fbef35d4936ee8117395a3009507a5cc74d2e8d94e6510ee92a51d1a2936

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      c1dc5568cc35eb29ddd0584354906b50.dll

    • Size

      79KB

    • MD5

      c1dc5568cc35eb29ddd0584354906b50

    • SHA1

      cc3eeb97d572b05e3b99c49577c890f6bb2809a0

    • SHA256

      6c98f6a695302a4a1477eddd22c5524c6bb766b6be905379c5e8a841f83b0af6

    • SHA512

      6b4930e3e55330ca8aa5862b7633da21a29dec29d81280fd59c91790e47caf9f80f4fbef35d4936ee8117395a3009507a5cc74d2e8d94e6510ee92a51d1a2936

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks