General

  • Target

    e9a8a8e84b56be971e9b00c5fa68da1a8e67bb013ba7289ffae3470580c8e67a

  • Size

    52KB

  • Sample

    210324-yztfbrs9js

  • MD5

    9448f2dae2b6f8e8f781a8898ba8bb4f

  • SHA1

    2f81dbea94ea682bf39e7943961089d1e41d0819

  • SHA256

    e9a8a8e84b56be971e9b00c5fa68da1a8e67bb013ba7289ffae3470580c8e67a

  • SHA512

    b2867961ca788e7bb4dfec1313583e2eb99b384f7eacdf7f567ed0ea258e1f17c503b762813cd2dae28efb1705d42b0f97adb390d5bac6aa201db183c561c882

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

feaser2347.club

Targets

    • Target

      e9a8a8e84b56be971e9b00c5fa68da1a8e67bb013ba7289ffae3470580c8e67a

    • Size

      52KB

    • MD5

      9448f2dae2b6f8e8f781a8898ba8bb4f

    • SHA1

      2f81dbea94ea682bf39e7943961089d1e41d0819

    • SHA256

      e9a8a8e84b56be971e9b00c5fa68da1a8e67bb013ba7289ffae3470580c8e67a

    • SHA512

      b2867961ca788e7bb4dfec1313583e2eb99b384f7eacdf7f567ed0ea258e1f17c503b762813cd2dae28efb1705d42b0f97adb390d5bac6aa201db183c561c882

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks