General

  • Target

    55b419bb9f56cba7fffd7b7cfb80de86b68d140af748bebb595815e9d667d6d9

  • Size

    199KB

  • Sample

    210401-cr11913p4x

  • MD5

    0ec1f3944f74a649f0e7c4ad9eb93f8f

  • SHA1

    4eb616bbda6ced1c5dec25feaaa2d7db0b9f76fc

  • SHA256

    55b419bb9f56cba7fffd7b7cfb80de86b68d140af748bebb595815e9d667d6d9

  • SHA512

    78c9424dc5962b5c19a4cd474dbceb71456330bc8f089e3b1f35c8f0a66617d9fa1f17860f2a137349c566100e190f5830c9f7d5f99be0a70cd74cb6fa0755a3

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

stoikoplot.xyz

Targets

    • Target

      55b419bb9f56cba7fffd7b7cfb80de86b68d140af748bebb595815e9d667d6d9

    • Size

      199KB

    • MD5

      0ec1f3944f74a649f0e7c4ad9eb93f8f

    • SHA1

      4eb616bbda6ced1c5dec25feaaa2d7db0b9f76fc

    • SHA256

      55b419bb9f56cba7fffd7b7cfb80de86b68d140af748bebb595815e9d667d6d9

    • SHA512

      78c9424dc5962b5c19a4cd474dbceb71456330bc8f089e3b1f35c8f0a66617d9fa1f17860f2a137349c566100e190f5830c9f7d5f99be0a70cd74cb6fa0755a3

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks