General

  • Target

    b9e6cbeb944818165848350f9c2a07ec.dll

  • Size

    126KB

  • Sample

    210426-v2am189fws

  • MD5

    b9e6cbeb944818165848350f9c2a07ec

  • SHA1

    4f85e6e2c1c40616567101e1f4e52ae1d12a1339

  • SHA256

    c5d2f656db9286b7a7b2d55fc4cbc586efe15d7be44913d6a92fcd3240e526a1

  • SHA512

    933df95c571d998b1812ffd8b132e7012b3f51ff5c8818234512905ae6f763f4972b492fcd3def50dc221984176738cbeebc6b97fc07451bf04322b5f0733c1c

Malware Config

Extracted

Family

icedid

Campaign

3451764797

C2

federallissimus.casa

Targets

    • Target

      b9e6cbeb944818165848350f9c2a07ec.dll

    • Size

      126KB

    • MD5

      b9e6cbeb944818165848350f9c2a07ec

    • SHA1

      4f85e6e2c1c40616567101e1f4e52ae1d12a1339

    • SHA256

      c5d2f656db9286b7a7b2d55fc4cbc586efe15d7be44913d6a92fcd3240e526a1

    • SHA512

      933df95c571d998b1812ffd8b132e7012b3f51ff5c8818234512905ae6f763f4972b492fcd3def50dc221984176738cbeebc6b97fc07451bf04322b5f0733c1c

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks