General

  • Target

    3ae5134263784bea2c5440af247c15746ed412cbddc4a6e4dcdceabc52111724

  • Size

    607KB

  • Sample

    220209-p8mqlaaeel

  • MD5

    8251e4ac5d0a29b051dcb2f462bfbaf0

  • SHA1

    8002f1a4914db95b0116fbfe21a709a57a395b29

  • SHA256

    3ae5134263784bea2c5440af247c15746ed412cbddc4a6e4dcdceabc52111724

  • SHA512

    5e28e4c224383c2f895886adaacb58a365690d5777a79d20a6ea9e3443e12ce4f90c24149adf8683875e9cd686d3073cda87970ea821eaa0a39baad6a3391b7a

Malware Config

Extracted

Family

icedid

Campaign

1732687004

C2

keepfootbal.com

Targets

    • Target

      3ae5134263784bea2c5440af247c15746ed412cbddc4a6e4dcdceabc52111724

    • Size

      607KB

    • MD5

      8251e4ac5d0a29b051dcb2f462bfbaf0

    • SHA1

      8002f1a4914db95b0116fbfe21a709a57a395b29

    • SHA256

      3ae5134263784bea2c5440af247c15746ed412cbddc4a6e4dcdceabc52111724

    • SHA512

      5e28e4c224383c2f895886adaacb58a365690d5777a79d20a6ea9e3443e12ce4f90c24149adf8683875e9cd686d3073cda87970ea821eaa0a39baad6a3391b7a

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Enterprise v6

Tasks