General

  • Target

    4d86320858effdc2c8bf3fc2ae86080f0f6b449141991.dll

  • Size

    79KB

  • Sample

    210325-dpk3amwpes

  • MD5

    576d4f0b4841f523653dbee9e500739f

  • SHA1

    29cbe779dfd9359a169d7c950e8af9623bfaf949

  • SHA256

    4d86320858effdc2c8bf3fc2ae86080f0f6b44914199139e980c29fa685091ae

  • SHA512

    b71bfed52fd7701b4649fa0e4d3760152a81bdfe1c8a5a6e5b819ccbceda047b4a433df8d10cbf3ce59fd650ea72f26b67d4808482fc13234aefa46a4abfebcf

Malware Config

Extracted

Family

icedid

Campaign

1211238709

C2

912caporers.fun

Targets

    • Target

      4d86320858effdc2c8bf3fc2ae86080f0f6b449141991.dll

    • Size

      79KB

    • MD5

      576d4f0b4841f523653dbee9e500739f

    • SHA1

      29cbe779dfd9359a169d7c950e8af9623bfaf949

    • SHA256

      4d86320858effdc2c8bf3fc2ae86080f0f6b44914199139e980c29fa685091ae

    • SHA512

      b71bfed52fd7701b4649fa0e4d3760152a81bdfe1c8a5a6e5b819ccbceda047b4a433df8d10cbf3ce59fd650ea72f26b67d4808482fc13234aefa46a4abfebcf

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks