General

  • Target

    a43189ea4bec9f81c51789011a7b2bb2e3e19028f9ebd31beaecf38abf273d02

  • Size

    52KB

  • Sample

    210324-wdgccqftya

  • MD5

    6f6445c2847e0142f2e950224ba65bf2

  • SHA1

    87201f606cb08b573f043364b245cfebfb315027

  • SHA256

    a43189ea4bec9f81c51789011a7b2bb2e3e19028f9ebd31beaecf38abf273d02

  • SHA512

    35d8aeafcc6c1dd33c6ada92483ebbc39e4d7038b14636f17e6c8643a6906f3206e532aac4ff4f5f0d0d646e29c0d9e09e1c483b72f3f6cd66b2329641b2c5b9

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      a43189ea4bec9f81c51789011a7b2bb2e3e19028f9ebd31beaecf38abf273d02

    • Size

      52KB

    • MD5

      6f6445c2847e0142f2e950224ba65bf2

    • SHA1

      87201f606cb08b573f043364b245cfebfb315027

    • SHA256

      a43189ea4bec9f81c51789011a7b2bb2e3e19028f9ebd31beaecf38abf273d02

    • SHA512

      35d8aeafcc6c1dd33c6ada92483ebbc39e4d7038b14636f17e6c8643a6906f3206e532aac4ff4f5f0d0d646e29c0d9e09e1c483b72f3f6cd66b2329641b2c5b9

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks