General

  • Target

    d44d6466acf376f3d3d94cc0886617c6d27de9ac391d443c69972a97830b0e65

  • Size

    65KB

  • Sample

    210324-n6rj8wayq2

  • MD5

    5f33c44e49cd7e071daad1c256747c78

  • SHA1

    50a12805d83c6a05fe4c6bdb350377f0ae8d1a2a

  • SHA256

    d44d6466acf376f3d3d94cc0886617c6d27de9ac391d443c69972a97830b0e65

  • SHA512

    35e876c73e3fd2f1320d4e12de677816dc5d6986d180adb1b2af0ba8b11a6f7b9d6570bd663adcd18e6b73a69f25d230021c7aac4092d4325f6ae2a6b65380b4

Malware Config

Extracted

Family

icedid

Campaign

3683573724

C2

24savetonnofmaoney.xyz

Targets

    • Target

      d44d6466acf376f3d3d94cc0886617c6d27de9ac391d443c69972a97830b0e65

    • Size

      65KB

    • MD5

      5f33c44e49cd7e071daad1c256747c78

    • SHA1

      50a12805d83c6a05fe4c6bdb350377f0ae8d1a2a

    • SHA256

      d44d6466acf376f3d3d94cc0886617c6d27de9ac391d443c69972a97830b0e65

    • SHA512

      35e876c73e3fd2f1320d4e12de677816dc5d6986d180adb1b2af0ba8b11a6f7b9d6570bd663adcd18e6b73a69f25d230021c7aac4092d4325f6ae2a6b65380b4

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks