General

  • Target

    4a637cb5c62d469c5d6e293a1e03d5a1bccca0556c58e.dll

  • Size

    238KB

  • Sample

    210506-1g5bcsv446

  • MD5

    4f9ac7226e67ccf960f2e7f0aa3aa64c

  • SHA1

    2e58fbe14a618bd0fae85e53971be66cf440b3f0

  • SHA256

    4a637cb5c62d469c5d6e293a1e03d5a1bccca0556c58e67b6aab06e1122afbd9

  • SHA512

    e6b98271b976db5fc977770dabfc3f82a3db4cc7c6c0d7890d3a85be9ca237f40bab293d2bf57de59c13fb0c8608f924ecef4fb49bf134b8608beafa41d1c31b

Malware Config

Extracted

Family

icedid

Campaign

3042509645

C2

barcafokliresd.top

Targets

    • Target

      4a637cb5c62d469c5d6e293a1e03d5a1bccca0556c58e.dll

    • Size

      238KB

    • MD5

      4f9ac7226e67ccf960f2e7f0aa3aa64c

    • SHA1

      2e58fbe14a618bd0fae85e53971be66cf440b3f0

    • SHA256

      4a637cb5c62d469c5d6e293a1e03d5a1bccca0556c58e67b6aab06e1122afbd9

    • SHA512

      e6b98271b976db5fc977770dabfc3f82a3db4cc7c6c0d7890d3a85be9ca237f40bab293d2bf57de59c13fb0c8608f924ecef4fb49bf134b8608beafa41d1c31b

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks