General

  • Target

    f21eb8eeacf3eaf1abc3eccf6350b58919a536b6f381f98c365819714b4ceb53

  • Size

    65KB

  • Sample

    210324-v9ea1dbj5n

  • MD5

    e1f9dc0d0b5c8855c6e91ec66f972cf7

  • SHA1

    a81a694fa4af1fa6df53a547127e617887b2d7c3

  • SHA256

    f21eb8eeacf3eaf1abc3eccf6350b58919a536b6f381f98c365819714b4ceb53

  • SHA512

    9caac7d5d3b61c316f0c5f27d85f125491365cde2315bf7bc5c54033fa76fc51f86af50b929a8b486510550a6a15a5a8adb9e4019aaddbd72e4d50b722b30c33

Malware Config

Extracted

Family

icedid

Campaign

3683573724

C2

24savetonnofmaoney.xyz

Targets

    • Target

      f21eb8eeacf3eaf1abc3eccf6350b58919a536b6f381f98c365819714b4ceb53

    • Size

      65KB

    • MD5

      e1f9dc0d0b5c8855c6e91ec66f972cf7

    • SHA1

      a81a694fa4af1fa6df53a547127e617887b2d7c3

    • SHA256

      f21eb8eeacf3eaf1abc3eccf6350b58919a536b6f381f98c365819714b4ceb53

    • SHA512

      9caac7d5d3b61c316f0c5f27d85f125491365cde2315bf7bc5c54033fa76fc51f86af50b929a8b486510550a6a15a5a8adb9e4019aaddbd72e4d50b722b30c33

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks