General

  • Target

    6ef7117ef58dbc4547a9c84063266d7c.dll

  • Size

    601KB

  • Sample

    220219-w52hxacggp

  • MD5

    6ef7117ef58dbc4547a9c84063266d7c

  • SHA1

    06cc851ba2d79e2cc60e56352938ca170fe07f0a

  • SHA256

    ccf86807e7b572efee1d4c631744fcee4a44699a236927e46a5011188e9cb10c

  • SHA512

    598af58e3633ef4e9c818209f6645bd517bc40fc203a84683d9c4e9ffbb04e11566f8b40d0f1fa66ff7a20f3a36f7b7ee0a08a2cf558bec4b77a9df429b42e70

Malware Config

Extracted

Family

icedid

Campaign

1117948791

C2

reseptors.com

Targets

    • Target

      6ef7117ef58dbc4547a9c84063266d7c.dll

    • Size

      601KB

    • MD5

      6ef7117ef58dbc4547a9c84063266d7c

    • SHA1

      06cc851ba2d79e2cc60e56352938ca170fe07f0a

    • SHA256

      ccf86807e7b572efee1d4c631744fcee4a44699a236927e46a5011188e9cb10c

    • SHA512

      598af58e3633ef4e9c818209f6645bd517bc40fc203a84683d9c4e9ffbb04e11566f8b40d0f1fa66ff7a20f3a36f7b7ee0a08a2cf558bec4b77a9df429b42e70

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks