General

  • Target

    46b72155496a52f4e09dd67a6068ea0a.dll

  • Size

    126KB

  • Sample

    210425-nej69yftva

  • MD5

    46b72155496a52f4e09dd67a6068ea0a

  • SHA1

    e9e1fa160e1a7b641f8ac9d23db05c35fcc53511

  • SHA256

    e001ddff1d29e0dba0db4f427f036956e006152ae18bb108807bd37f64f5ccb8

  • SHA512

    863de29d95a279782a8772d1ff678d5e7cff68733ea3050bafe213c8b7f6b3862cd8a1fd9d60f8543caa91911ce7dfaf0d53aa1fde7d198bc2520f86435e1d6f

Malware Config

Extracted

Family

icedid

Campaign

3451764797

C2

federallissimus.casa

Targets

    • Target

      46b72155496a52f4e09dd67a6068ea0a.dll

    • Size

      126KB

    • MD5

      46b72155496a52f4e09dd67a6068ea0a

    • SHA1

      e9e1fa160e1a7b641f8ac9d23db05c35fcc53511

    • SHA256

      e001ddff1d29e0dba0db4f427f036956e006152ae18bb108807bd37f64f5ccb8

    • SHA512

      863de29d95a279782a8772d1ff678d5e7cff68733ea3050bafe213c8b7f6b3862cd8a1fd9d60f8543caa91911ce7dfaf0d53aa1fde7d198bc2520f86435e1d6f

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks