General

  • Target

    bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

  • Size

    552KB

  • Sample

    220217-m3jqmscbbj

  • MD5

    791779361e8db64ec7fbeb8b82d68ce7

  • SHA1

    8632bff9f308fa57ae5bd1aad56b5ec8ff91f466

  • SHA256

    bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

  • SHA512

    da4b1b98c6d190311cc5df10c91560a2818d8aa1707d9d77a8fe4275d99766ff29f3d39588b200986f3d0e5eb001a72b5b459f1e95e1e34d875ceb531d6079b4

Malware Config

Extracted

Family

icedid

Campaign

412701809

Targets

    • Target

      bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

    • Size

      552KB

    • MD5

      791779361e8db64ec7fbeb8b82d68ce7

    • SHA1

      8632bff9f308fa57ae5bd1aad56b5ec8ff91f466

    • SHA256

      bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

    • SHA512

      da4b1b98c6d190311cc5df10c91560a2818d8aa1707d9d77a8fe4275d99766ff29f3d39588b200986f3d0e5eb001a72b5b459f1e95e1e34d875ceb531d6079b4

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks