General

  • Target

    ice.exe

  • Size

    199KB

  • Sample

    210402-dzzklzqxqn

  • MD5

    39d1db996c96cd7f7e4639b5a4906658

  • SHA1

    657ff8aae170d3dae212f0b84ac8c6ab996bea9b

  • SHA256

    b560e2d47ad2c84f16667b570010078a3df3ef70e788fab00381771f2a0bb336

  • SHA512

    ef63a0326acc4140659ecaadcefaa7a650d735cb7097ea7bbe3caf9bd362bf7a99e4ad3e60a09cc49f39c756dd2f7c7bf58eed39593cd18366659732c3079089

Malware Config

Extracted

Family

icedid

Campaign

1584008337

C2

stoikoplot.xyz

Targets

    • Target

      ice.exe

    • Size

      199KB

    • MD5

      39d1db996c96cd7f7e4639b5a4906658

    • SHA1

      657ff8aae170d3dae212f0b84ac8c6ab996bea9b

    • SHA256

      b560e2d47ad2c84f16667b570010078a3df3ef70e788fab00381771f2a0bb336

    • SHA512

      ef63a0326acc4140659ecaadcefaa7a650d735cb7097ea7bbe3caf9bd362bf7a99e4ad3e60a09cc49f39c756dd2f7c7bf58eed39593cd18366659732c3079089

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks