General

  • Target

    sjldkiaqxmd.dll

  • Size

    171KB

  • Sample

    211124-184vnahac8

  • MD5

    89d96985d6cb448bcc7c55065ce94810

  • SHA1

    7354192276c40b7e8fb2e756cb76b4377f94c312

  • SHA256

    0e242002e3e8597334cefd90e4a46bb68c528d5642ad4b39e9163a5134be3ac2

  • SHA512

    d165f992921d9ed3cb47e65c4bb6c30556c43f80ce6e74fbfddab03c7c365c3bba518e0e471499908f2eff252129e157c9922803220940fe2e940c3f8550ef39

Malware Config

Extracted

Family

icedid

Campaign

3122682570

C2

iningsessi.ink

Targets

    • Target

      sjldkiaqxmd.dll

    • Size

      171KB

    • MD5

      89d96985d6cb448bcc7c55065ce94810

    • SHA1

      7354192276c40b7e8fb2e756cb76b4377f94c312

    • SHA256

      0e242002e3e8597334cefd90e4a46bb68c528d5642ad4b39e9163a5134be3ac2

    • SHA512

      d165f992921d9ed3cb47e65c4bb6c30556c43f80ce6e74fbfddab03c7c365c3bba518e0e471499908f2eff252129e157c9922803220940fe2e940c3f8550ef39

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks