General

  • Target

    eehxugjjbmd.dll

  • Size

    317KB

  • Sample

    211125-dzvjasebgm

  • MD5

    1d212d44697dd2d296258dc3997c824a

  • SHA1

    76be0db71870403cb2bdf0c37d0ed149b28b7eb9

  • SHA256

    3073520d87ab54bde41b21975fa8a58f62e535cdea6ce22f835f48f94ed9342b

  • SHA512

    85f8737614c3d3149c83459d675da47f770131af344da7f8a9e32297ede418a05a2724fd18837ae2c5d59cf9505c78c351a6ef2731e6105c44b1883b84bbb760

Malware Config

Extracted

Family

icedid

Campaign

4191098835

C2

endofyour.ink

Targets

    • Target

      eehxugjjbmd.dll

    • Size

      317KB

    • MD5

      1d212d44697dd2d296258dc3997c824a

    • SHA1

      76be0db71870403cb2bdf0c37d0ed149b28b7eb9

    • SHA256

      3073520d87ab54bde41b21975fa8a58f62e535cdea6ce22f835f48f94ed9342b

    • SHA512

      85f8737614c3d3149c83459d675da47f770131af344da7f8a9e32297ede418a05a2724fd18837ae2c5d59cf9505c78c351a6ef2731e6105c44b1883b84bbb760

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks