Resubmissions

04/05/2021, 18:46

210504-q765esylze10

04/05/2021, 13:52

210504-hf6an9leje10

General

  • Target
    pasteBorder.dll
  • Size 337KB
  • Sample210504-q765esylze
  • SHA256 fa914c9914a9a663613c62467009adb9a283275863e0fd4a39b5e5e4f3a0f376
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • icedid

Campaign
  • 3042509645

C2
  • barcafokliresd.top

Targets

    • Target
      pasteBorder.dll
    • Size 337KB
    • SHA256 fa914c9914a9a663613c62467009adb9a283275863e0fd4a39b5e5e4f3a0f376
    • MD5 SHA1 SHA512
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • PhotoLoader Payload

      IcedID downloder-Photloader.

MITRE ATT&CK Matrix

Tasks