General

  • Target

    f8eb655b6dc2fab0a8a4fbc3f3b8a7af819e0d7a414de22c9dabaeca2acfcabf

  • Size

    51KB

  • Sample

    210511-k6lr36b4sx

  • MD5

    e790f0e9d15b6230bfd11a46f84bbd19

  • SHA1

    831fd072cb92ce51e13202e7f1292b27ec08d99b

  • SHA256

    f8eb655b6dc2fab0a8a4fbc3f3b8a7af819e0d7a414de22c9dabaeca2acfcabf

  • SHA512

    3dfef4e53dab30d6b8d581d6d2f19564d539d96690243a496297a022560475d11480ccac20fadf1cf27cb22bbb037cf6ffff55687d5f294a75c3d13f755df374

Malware Config

Extracted

Family

icedid

Campaign

2975399169

C2

dupperawergo.top

Targets

    • Target

      f8eb655b6dc2fab0a8a4fbc3f3b8a7af819e0d7a414de22c9dabaeca2acfcabf

    • Size

      51KB

    • MD5

      e790f0e9d15b6230bfd11a46f84bbd19

    • SHA1

      831fd072cb92ce51e13202e7f1292b27ec08d99b

    • SHA256

      f8eb655b6dc2fab0a8a4fbc3f3b8a7af819e0d7a414de22c9dabaeca2acfcabf

    • SHA512

      3dfef4e53dab30d6b8d581d6d2f19564d539d96690243a496297a022560475d11480ccac20fadf1cf27cb22bbb037cf6ffff55687d5f294a75c3d13f755df374

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks