General

  • Target

    658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94

  • Size

    607KB

  • Sample

    220208-zta4csehen

  • MD5

    312c1ba3975e1ed9a0122ae2a8d1540e

  • SHA1

    7bd06ef45eed15d2b2cda357840bbfa7963e5edb

  • SHA256

    658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94

  • SHA512

    4688040f647f49736f16cc32b9f8a1203a62ab51e8409f8ed757337b21e084657b8a3db951efe97e1a4d3bea3c969fb64f2b2547c029c4606f3d9e563f7590cf

Malware Config

Extracted

Family

icedid

Campaign

1732687004

C2

keepfootbal.com

Targets

    • Target

      658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94

    • Size

      607KB

    • MD5

      312c1ba3975e1ed9a0122ae2a8d1540e

    • SHA1

      7bd06ef45eed15d2b2cda357840bbfa7963e5edb

    • SHA256

      658c58098d53a58a5ac99389167280f5d47e29ed184c6e60e19241823ce49a94

    • SHA512

      4688040f647f49736f16cc32b9f8a1203a62ab51e8409f8ed757337b21e084657b8a3db951efe97e1a4d3bea3c969fb64f2b2547c029c4606f3d9e563f7590cf

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks