General

  • Target

    4bac

  • Size

    251KB

  • Sample

    211201-tcwqvadeeq

  • MD5

    96963fac815bf1862e495f960ea21131

  • SHA1

    28f8fed8986b69e0510a9f60c7cbe974468b5ab0

  • SHA256

    6f8c2dcbd58f688b31f830ed801128bdb7535ecc2ea8a8bedf415efd0eb4aa59

  • SHA512

    55242d566b364360072c322c4ef7832051de13dad4d0c15f6ac353b04ef0f3b6eba4ba67923564610221fd5b5fd525c63fb59415796e792ae4c234214b4eb630

Malware Config

Extracted

Family

icedid

Campaign

1892568649

C2

normyils.com

Targets

    • Target

      4bac

    • Size

      251KB

    • MD5

      96963fac815bf1862e495f960ea21131

    • SHA1

      28f8fed8986b69e0510a9f60c7cbe974468b5ab0

    • SHA256

      6f8c2dcbd58f688b31f830ed801128bdb7535ecc2ea8a8bedf415efd0eb4aa59

    • SHA512

      55242d566b364360072c322c4ef7832051de13dad4d0c15f6ac353b04ef0f3b6eba4ba67923564610221fd5b5fd525c63fb59415796e792ae4c234214b4eb630

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks