General

  • Target

    26530fc68c25bbce392055f6936415bf5b927366de7b1.dll

  • Size

    198KB

  • Sample

    210401-526ss85mzn

  • MD5

    500047708ba38d2cff0f1b543c4cc26b

  • SHA1

    0025cf82536473c2eae021faff1604dbf187d20f

  • SHA256

    26530fc68c25bbce392055f6936415bf5b927366de7b1b412142671c43359641

  • SHA512

    f3462cfa9c4ac99bf54de0ba52f488188820f4f5ea41dbcbe12f6c7ea381633b0fbdf18dd1a6de30619b38eb4abf7908743a69b9b52a12690f80f5718ee4f5ac

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

secondpilots.space

Targets

    • Target

      26530fc68c25bbce392055f6936415bf5b927366de7b1.dll

    • Size

      198KB

    • MD5

      500047708ba38d2cff0f1b543c4cc26b

    • SHA1

      0025cf82536473c2eae021faff1604dbf187d20f

    • SHA256

      26530fc68c25bbce392055f6936415bf5b927366de7b1b412142671c43359641

    • SHA512

      f3462cfa9c4ac99bf54de0ba52f488188820f4f5ea41dbcbe12f6c7ea381633b0fbdf18dd1a6de30619b38eb4abf7908743a69b9b52a12690f80f5718ee4f5ac

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks