General

  • Target

    32f0ac02aaf4403016b8228a3cdcfe079c2935f0881205446cdde768a5f27544

  • Size

    490KB

  • Sample

    220221-lkq7bsabdj

  • MD5

    ca63c50f69e4849a088956f1f84e7895

  • SHA1

    1bcc2ff3a4a5109ad91ccb33c93b7dfdd82cc14b

  • SHA256

    32f0ac02aaf4403016b8228a3cdcfe079c2935f0881205446cdde768a5f27544

  • SHA512

    9874a6ea734b6ed8a029d33574e4676f86f1a21b1eef18a1b92f3e99d75b0e2d5f2dc33b4bb9ec64142457816a15c715f3c63f7e9564245480d0f54b0a39f2c9

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      32f0ac02aaf4403016b8228a3cdcfe079c2935f0881205446cdde768a5f27544

    • Size

      490KB

    • MD5

      ca63c50f69e4849a088956f1f84e7895

    • SHA1

      1bcc2ff3a4a5109ad91ccb33c93b7dfdd82cc14b

    • SHA256

      32f0ac02aaf4403016b8228a3cdcfe079c2935f0881205446cdde768a5f27544

    • SHA512

      9874a6ea734b6ed8a029d33574e4676f86f1a21b1eef18a1b92f3e99d75b0e2d5f2dc33b4bb9ec64142457816a15c715f3c63f7e9564245480d0f54b0a39f2c9

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks