General

  • Target

    883fc57b5494b71116dc0f7e3988a4a695adaa4528186.dll

  • Size

    199KB

  • Sample

    210402-dyycrxt16j

  • MD5

    f40cc4e9f516e8051c68476add34fb68

  • SHA1

    441ec742f8f3f20632697f9c3eaf11a49f13e1c9

  • SHA256

    883fc57b5494b71116dc0f7e3988a4a695adaa45281862269d3ac048703adf67

  • SHA512

    bcb1a579e4f9c9673676af774a6c4d1cb6932bfcd21f17d2cc2f0bdeb0cfcf0e81fbdaa87f0c0b74539ab191e430e9700f76b534b5b274a054d3f90ada27d30c

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

stoikoplot.xyz

Targets

    • Target

      883fc57b5494b71116dc0f7e3988a4a695adaa4528186.dll

    • Size

      199KB

    • MD5

      f40cc4e9f516e8051c68476add34fb68

    • SHA1

      441ec742f8f3f20632697f9c3eaf11a49f13e1c9

    • SHA256

      883fc57b5494b71116dc0f7e3988a4a695adaa45281862269d3ac048703adf67

    • SHA512

      bcb1a579e4f9c9673676af774a6c4d1cb6932bfcd21f17d2cc2f0bdeb0cfcf0e81fbdaa87f0c0b74539ab191e430e9700f76b534b5b274a054d3f90ada27d30c

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks