General

  • Target

    4aaf857e59a25f98e133aa59bac419b22a60ecc4dcade883bf217ce76c25bf84

  • Size

    574KB

  • Sample

    220216-v26g1sdcbn

  • MD5

    e24f49f0af80cebbb58c06f64922a0ae

  • SHA1

    4ed4f322bba5656ff6e676823c66eae2b3a3bc69

  • SHA256

    4aaf857e59a25f98e133aa59bac419b22a60ecc4dcade883bf217ce76c25bf84

  • SHA512

    38e50610965bc0d9a9088a7cffb93a4896a19c9a6d27d6453f96dbad76d5850c3dc17e61afcdbad3ff112a5fb6996e2a03da7438b6f7729612af51174d950673

Malware Config

Extracted

Family

icedid

Campaign

1117948791

Targets

    • Target

      4aaf857e59a25f98e133aa59bac419b22a60ecc4dcade883bf217ce76c25bf84

    • Size

      574KB

    • MD5

      e24f49f0af80cebbb58c06f64922a0ae

    • SHA1

      4ed4f322bba5656ff6e676823c66eae2b3a3bc69

    • SHA256

      4aaf857e59a25f98e133aa59bac419b22a60ecc4dcade883bf217ce76c25bf84

    • SHA512

      38e50610965bc0d9a9088a7cffb93a4896a19c9a6d27d6453f96dbad76d5850c3dc17e61afcdbad3ff112a5fb6996e2a03da7438b6f7729612af51174d950673

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks