General

  • Target

    46e20b3931c4550ade3e4abd395a289621ea3f42f6aa44c90083ebb7f7be2704

  • Size

    344KB

  • Sample

    211130-hgszzaeafl

  • MD5

    2ee33ef3b24574c9fb54fd75e29fdf6e

  • SHA1

    158a048f5f5feac85eb5791fbb25ba6aaf262712

  • SHA256

    46e20b3931c4550ade3e4abd395a289621ea3f42f6aa44c90083ebb7f7be2704

  • SHA512

    0655a316b91070c8275afba7ab8437da66cd8b00e4ddcc58c86fa28444deb66700d19e76e93329910c7e44ef28ec488556e2026221980b6aacaa804745a56c5e

Malware Config

Extracted

Family

icedid

Campaign

2904573523

C2

placingapie.ink

Targets

    • Target

      46e20b3931c4550ade3e4abd395a289621ea3f42f6aa44c90083ebb7f7be2704

    • Size

      344KB

    • MD5

      2ee33ef3b24574c9fb54fd75e29fdf6e

    • SHA1

      158a048f5f5feac85eb5791fbb25ba6aaf262712

    • SHA256

      46e20b3931c4550ade3e4abd395a289621ea3f42f6aa44c90083ebb7f7be2704

    • SHA512

      0655a316b91070c8275afba7ab8437da66cd8b00e4ddcc58c86fa28444deb66700d19e76e93329910c7e44ef28ec488556e2026221980b6aacaa804745a56c5e

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks