General

  • Target

    b3a5a0b25cc47b1d6a901c761d13390aec21f29994c2dbe54fc42b3661a56f2b

  • Size

    52KB

  • Sample

    210324-vthgm1zln2

  • MD5

    4a3ca94e374f1556cd8dbd818740d77d

  • SHA1

    4192cf6c072501e6102a138c5e54184fb55c4d02

  • SHA256

    b3a5a0b25cc47b1d6a901c761d13390aec21f29994c2dbe54fc42b3661a56f2b

  • SHA512

    cd110eda56db8c1d21828f99c32ec43b6106d7c197d82e8651a7eb7848b282eca15336d18aa6334413af62ad98e8c657d0c553df796ef2714c56a9e5215ae271

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      b3a5a0b25cc47b1d6a901c761d13390aec21f29994c2dbe54fc42b3661a56f2b

    • Size

      52KB

    • MD5

      4a3ca94e374f1556cd8dbd818740d77d

    • SHA1

      4192cf6c072501e6102a138c5e54184fb55c4d02

    • SHA256

      b3a5a0b25cc47b1d6a901c761d13390aec21f29994c2dbe54fc42b3661a56f2b

    • SHA512

      cd110eda56db8c1d21828f99c32ec43b6106d7c197d82e8651a7eb7848b282eca15336d18aa6334413af62ad98e8c657d0c553df796ef2714c56a9e5215ae271

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks