General

  • Target

    85bcf4fad0a29ffb0a376833ee30b43901f15df66b057d954748a5bcefd67773

  • Size

    490KB

  • Sample

    220221-lkrsvsabdl

  • MD5

    07c437e5e2af25f480411a7b03d518c1

  • SHA1

    2b32eaae773cf741f79fc7fee8b652dd80929247

  • SHA256

    85bcf4fad0a29ffb0a376833ee30b43901f15df66b057d954748a5bcefd67773

  • SHA512

    b1662477d5f6d38cb2960bcb548a7bb45fb37b9e3794c10667b975548a98f88fc54f0f8085a5c885bd68cdb4a498e1753a60094d69d15c988188ef9277817871

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      85bcf4fad0a29ffb0a376833ee30b43901f15df66b057d954748a5bcefd67773

    • Size

      490KB

    • MD5

      07c437e5e2af25f480411a7b03d518c1

    • SHA1

      2b32eaae773cf741f79fc7fee8b652dd80929247

    • SHA256

      85bcf4fad0a29ffb0a376833ee30b43901f15df66b057d954748a5bcefd67773

    • SHA512

      b1662477d5f6d38cb2960bcb548a7bb45fb37b9e3794c10667b975548a98f88fc54f0f8085a5c885bd68cdb4a498e1753a60094d69d15c988188ef9277817871

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Enterprise v6

Tasks