General

  • Target

    32ea5e14ae2100fdf4da1a6b9762f95b0a63bcf415dd05011f7d4be89cb0de31

  • Size

    65KB

  • Sample

    210324-jt7etpa962

  • MD5

    4f9641305573b67c378989e4c47227e5

  • SHA1

    13ef6cac09560ca2d56bdf6cb5ae193c9c358b06

  • SHA256

    32ea5e14ae2100fdf4da1a6b9762f95b0a63bcf415dd05011f7d4be89cb0de31

  • SHA512

    f92010ebb2cb9022c7a4780c01bfdd610fc86371a578ba54bff155556c28fa535ed81aa982dcf82094f8ad3d75c13bb2f78af121c332181eb78e2c3d31e14954

Malware Config

Extracted

Family

icedid

Campaign

3683573724

C2

24savetonnofmaoney.xyz

Targets

    • Target

      32ea5e14ae2100fdf4da1a6b9762f95b0a63bcf415dd05011f7d4be89cb0de31

    • Size

      65KB

    • MD5

      4f9641305573b67c378989e4c47227e5

    • SHA1

      13ef6cac09560ca2d56bdf6cb5ae193c9c358b06

    • SHA256

      32ea5e14ae2100fdf4da1a6b9762f95b0a63bcf415dd05011f7d4be89cb0de31

    • SHA512

      f92010ebb2cb9022c7a4780c01bfdd610fc86371a578ba54bff155556c28fa535ed81aa982dcf82094f8ad3d75c13bb2f78af121c332181eb78e2c3d31e14954

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks