General

  • Target

    33a21184c636478ad06bde75451c90aace07f3e7288d14d200d55f32fabdfe8f

  • Size

    198KB

  • Sample

    210401-wk8hvka3ea

  • MD5

    6049f53957e937e837ee9819f4a3d4f5

  • SHA1

    e3c72bfedd0e9a8abddb63e9ccb8602a6c824569

  • SHA256

    33a21184c636478ad06bde75451c90aace07f3e7288d14d200d55f32fabdfe8f

  • SHA512

    2c2652c143190f350aedeec71ef5710f62415249f8997e140aa0d01519479a524e87d2d0bd51111e695dd401ccbabc1cf4231afd9ecbbfc8ca548cd517ab3608

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

secondpilots.space

Targets

    • Target

      33a21184c636478ad06bde75451c90aace07f3e7288d14d200d55f32fabdfe8f

    • Size

      198KB

    • MD5

      6049f53957e937e837ee9819f4a3d4f5

    • SHA1

      e3c72bfedd0e9a8abddb63e9ccb8602a6c824569

    • SHA256

      33a21184c636478ad06bde75451c90aace07f3e7288d14d200d55f32fabdfe8f

    • SHA512

      2c2652c143190f350aedeec71ef5710f62415249f8997e140aa0d01519479a524e87d2d0bd51111e695dd401ccbabc1cf4231afd9ecbbfc8ca548cd517ab3608

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks