General

  • Target

    powKarolTube.jpg.dll

  • Size

    120KB

  • Sample

    211215-vcd2gaabc4

  • MD5

    d058493b1e9034179d32ed6294121203

  • SHA1

    1180265fdd53d3aa0fb9db911ec58206f38b839e

  • SHA256

    9de8ddf933c49db9b30ccf8450cae48460a6ca70f89d3a2e1be6d39155184e7c

  • SHA512

    e532b717fb8f266c1781e2981db93de369745627955ab4787db416bd5c4e47d90dd1386990e07a1c667c57c1a1d3c69baebe39a09faa45a971b11477074389c7

Malware Config

Extracted

Family

icedid

Campaign

1694525507

C2

firenicatrible.com

Targets

    • Target

      powKarolTube.jpg.dll

    • Size

      120KB

    • MD5

      d058493b1e9034179d32ed6294121203

    • SHA1

      1180265fdd53d3aa0fb9db911ec58206f38b839e

    • SHA256

      9de8ddf933c49db9b30ccf8450cae48460a6ca70f89d3a2e1be6d39155184e7c

    • SHA512

      e532b717fb8f266c1781e2981db93de369745627955ab4787db416bd5c4e47d90dd1386990e07a1c667c57c1a1d3c69baebe39a09faa45a971b11477074389c7

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks