General

  • Target
    d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2d.dll
  • Size 198KB
  • Sample210401-vcfnw238n2
  • SHA256 d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2db819349cf0d264843c1
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • icedid

Campaign
  • 1584008337

C2
  • secondpilots.space

Targets

    • Target
      d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2d.dll
    • Size 198KB
    • SHA256 d306a9e5b59891e8eced5b995b95922e7bbdb2db4ea2db819349cf0d264843c1
    • MD5 SHA1 SHA512
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks