General

  • Target

    7814752e9e8f269e55459068717917804878c38e.dll

  • Size

    344KB

  • Sample

    211129-2vlbtscgfj

  • MD5

    60c8fbebba16716da4f9aa5f2268f942

  • SHA1

    7814752e9e8f269e55459068717917804878c38e

  • SHA256

    4e464218378946df0688bf7f51169482d1da4323ba76d69f224ed417c4b561f3

  • SHA512

    1fdad86c4dbd9707ac5b7a3dc0b0c7c8e690e66d4da172c920b5b10235122ed42b8616d600fda98f8fd5ad4d53b2628758a2106c328b84acd3a3854bc939ef3d

Malware Config

Extracted

Family

icedid

Campaign

2904573523

C2

placingapie.ink

Targets

    • Target

      7814752e9e8f269e55459068717917804878c38e.dll

    • Size

      344KB

    • MD5

      60c8fbebba16716da4f9aa5f2268f942

    • SHA1

      7814752e9e8f269e55459068717917804878c38e

    • SHA256

      4e464218378946df0688bf7f51169482d1da4323ba76d69f224ed417c4b561f3

    • SHA512

      1fdad86c4dbd9707ac5b7a3dc0b0c7c8e690e66d4da172c920b5b10235122ed42b8616d600fda98f8fd5ad4d53b2628758a2106c328b84acd3a3854bc939ef3d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks