General

  • Target

    0172c74ba54fb3fdb4da903253bb10e07815bc1c64821a336b1d89be3c5ce076

  • Size

    52KB

  • Sample

    210324-xw438778ne

  • MD5

    79842399cd8917b4f77696727d4b6a52

  • SHA1

    dd018cc8bbdf17be3eff26c4c344165a380f76cf

  • SHA256

    0172c74ba54fb3fdb4da903253bb10e07815bc1c64821a336b1d89be3c5ce076

  • SHA512

    0476adff0e333396dd06af505f09ce1dc61230c03a5ac6f8f2ccab43646fb97eb73d716a8cbd43a203a7b77efa261336230fd4fc5349e55a75d387331fdc7692

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      0172c74ba54fb3fdb4da903253bb10e07815bc1c64821a336b1d89be3c5ce076

    • Size

      52KB

    • MD5

      79842399cd8917b4f77696727d4b6a52

    • SHA1

      dd018cc8bbdf17be3eff26c4c344165a380f76cf

    • SHA256

      0172c74ba54fb3fdb4da903253bb10e07815bc1c64821a336b1d89be3c5ce076

    • SHA512

      0476adff0e333396dd06af505f09ce1dc61230c03a5ac6f8f2ccab43646fb97eb73d716a8cbd43a203a7b77efa261336230fd4fc5349e55a75d387331fdc7692

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks