General

  • Target

    baf471f9238cb6b5f1aa9c8a32a948d67900ba988e1324b4bbb4a4287b980566

  • Size

    79KB

  • Sample

    210324-q2teddcr4j

  • MD5

    a9dc93822533c45fb0c057878a98cc85

  • SHA1

    3d58441f37c471f473f8fc63948f0ae2b92fd906

  • SHA256

    baf471f9238cb6b5f1aa9c8a32a948d67900ba988e1324b4bbb4a4287b980566

  • SHA512

    23e7882aa4b293455c042f7ab0c0ad72e893ae1887bd906f12ec047d7d3d62950c3d20ea0d8cab10ff9dc984bcd8a36a055a84cc7e906cabaa9fdb3e560c1ea1

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      baf471f9238cb6b5f1aa9c8a32a948d67900ba988e1324b4bbb4a4287b980566

    • Size

      79KB

    • MD5

      a9dc93822533c45fb0c057878a98cc85

    • SHA1

      3d58441f37c471f473f8fc63948f0ae2b92fd906

    • SHA256

      baf471f9238cb6b5f1aa9c8a32a948d67900ba988e1324b4bbb4a4287b980566

    • SHA512

      23e7882aa4b293455c042f7ab0c0ad72e893ae1887bd906f12ec047d7d3d62950c3d20ea0d8cab10ff9dc984bcd8a36a055a84cc7e906cabaa9fdb3e560c1ea1

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks