General

  • Target

    872bc9beabc031d9b736dbc9b7a05dfa5a25bce335f0d345abec2606ada67094

  • Size

    52KB

  • Sample

    210324-qxqw1j1wta

  • MD5

    f0d0c5765f3da6b6d6653c8d98074477

  • SHA1

    e8e7c42f5caa7341defb7e0af10cf95c0a0cae8c

  • SHA256

    872bc9beabc031d9b736dbc9b7a05dfa5a25bce335f0d345abec2606ada67094

  • SHA512

    0e8a5e15898d8999b6472ccaaaf8d5835f53b6425f2437e0c033a4c944f7875c487931d0aecf76489befd81b974b742db0c48b707f45d434e0ba42a02578decf

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      872bc9beabc031d9b736dbc9b7a05dfa5a25bce335f0d345abec2606ada67094

    • Size

      52KB

    • MD5

      f0d0c5765f3da6b6d6653c8d98074477

    • SHA1

      e8e7c42f5caa7341defb7e0af10cf95c0a0cae8c

    • SHA256

      872bc9beabc031d9b736dbc9b7a05dfa5a25bce335f0d345abec2606ada67094

    • SHA512

      0e8a5e15898d8999b6472ccaaaf8d5835f53b6425f2437e0c033a4c944f7875c487931d0aecf76489befd81b974b742db0c48b707f45d434e0ba42a02578decf

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks