Resubmissions

28/07/2021, 10:21

210728-47rr4fbrl210

20/05/2021, 22:30

210520-jb29avnrae10

06/04/2021, 09:24

210406-3zhhrb3h1210

General

  • Target
    ca93e1c7dc98ca126438c4772f9c3377de5f628b612fe3dc8f72709d5e5bbdb0
  • Size 63KB
  • Sample210728-47rr4fbrl2
  • SHA256 ca93e1c7dc98ca126438c4772f9c3377de5f628b612fe3dc8f72709d5e5bbdb0
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • icedid

Campaign
  • 2608516171

C2
  • 234willkids.uno

Targets

    • Target
      ca93e1c7dc98ca126438c4772f9c3377de5f628b612fe3dc8f72709d5e5bbdb0
    • Size 63KB
    • SHA256 ca93e1c7dc98ca126438c4772f9c3377de5f628b612fe3dc8f72709d5e5bbdb0
    • MD5 SHA1 SHA512
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

    • suricata: ET MALWARE Win32/IcedID Requesting Encoded Binary M4

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks