General

  • Target

    8c8844cdcee69f1ad7b34bf10a07f246d97420948c9d42b93e996abccc916a14.exe

  • Size

    37KB

  • Sample

    211020-ksktvaggf4

  • MD5

    0163f9644a33484d44e0bf5d5311d8cb

  • SHA1

    ce097619dbe3d2d2e506761a5339597a866b5f93

  • SHA256

    8c8844cdcee69f1ad7b34bf10a07f246d97420948c9d42b93e996abccc916a14

  • SHA512

    20fdc9ab65fe82dda3a3d7e211403452858902e0a1fc0cba7eae80d432b9fbe8103fadfd5e42d0a31b6eb8497e281e4cde3d00f02f0894a6f9b6059ba9d85c91

Malware Config

Extracted

Family

icedid

Campaign

1909237042

C2

onlyadheres.com

Targets

    • Target

      8c8844cdcee69f1ad7b34bf10a07f246d97420948c9d42b93e996abccc916a14.exe

    • Size

      37KB

    • MD5

      0163f9644a33484d44e0bf5d5311d8cb

    • SHA1

      ce097619dbe3d2d2e506761a5339597a866b5f93

    • SHA256

      8c8844cdcee69f1ad7b34bf10a07f246d97420948c9d42b93e996abccc916a14

    • SHA512

      20fdc9ab65fe82dda3a3d7e211403452858902e0a1fc0cba7eae80d432b9fbe8103fadfd5e42d0a31b6eb8497e281e4cde3d00f02f0894a6f9b6059ba9d85c91

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks