General

  • Target

    6732dca4ff69dbab9206e7a60746a074.dll

  • Size

    79KB

  • Sample

    210324-ty2zvadtwx

  • MD5

    6732dca4ff69dbab9206e7a60746a074

  • SHA1

    208f0f37fac6ca67464bd83f620829f789918ecb

  • SHA256

    70088991b7efd2a21b95b2232c176086939cfeec0e5d549d8e01b68d4e901e32

  • SHA512

    746e26be2b451cb01e339fce83b92b02857330951587982959f8529468f570f5bf433c9e278a67be2695294f5f00c0472fca904e357d16b48980c92f4505132b

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      6732dca4ff69dbab9206e7a60746a074.dll

    • Size

      79KB

    • MD5

      6732dca4ff69dbab9206e7a60746a074

    • SHA1

      208f0f37fac6ca67464bd83f620829f789918ecb

    • SHA256

      70088991b7efd2a21b95b2232c176086939cfeec0e5d549d8e01b68d4e901e32

    • SHA512

      746e26be2b451cb01e339fce83b92b02857330951587982959f8529468f570f5bf433c9e278a67be2695294f5f00c0472fca904e357d16b48980c92f4505132b

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks