General

  • Target

    labyq11

  • Size

    40KB

  • Sample

    210512-gtaws12g92

  • MD5

    595e333934f7d940aeca741dd93e31cb

  • SHA1

    294121d85a07f7443668606813ae9301ba3984e9

  • SHA256

    1b859320d60949c6d234e19ec3f62ccaa115737f5410ecfeaffc3d3352afb3cc

  • SHA512

    6f73a6a2b645a716c3807b9e3374a12cd4f9098ca4792ea5a475e98b7f338ac1ba631f32f2ade2c30126c6e737888fd0dfdb8a53910066502290f55336b59e59

Malware Config

Extracted

Family

icedid

Campaign

2857955836

C2

wasthuliok.live

Targets

    • Target

      labyq11

    • Size

      40KB

    • MD5

      595e333934f7d940aeca741dd93e31cb

    • SHA1

      294121d85a07f7443668606813ae9301ba3984e9

    • SHA256

      1b859320d60949c6d234e19ec3f62ccaa115737f5410ecfeaffc3d3352afb3cc

    • SHA512

      6f73a6a2b645a716c3807b9e3374a12cd4f9098ca4792ea5a475e98b7f338ac1ba631f32f2ade2c30126c6e737888fd0dfdb8a53910066502290f55336b59e59

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks