General

  • Target

    991f83c9b57cb163de279b5bcd3bf2a73889ca51ca3cbc1e4debb9ce95385a78

  • Size

    490KB

  • Sample

    220221-lksedsabdq

  • MD5

    710ee64e7858b761d0be628f04f1f7cd

  • SHA1

    08778eb54f03561da6ad1e2febb147d4dd437682

  • SHA256

    991f83c9b57cb163de279b5bcd3bf2a73889ca51ca3cbc1e4debb9ce95385a78

  • SHA512

    16440e8349dbfce57ce8d6139eeb3b5a1231974967c2e9537f4fe637b94bae52297b390ae0c59d9c7f325a9a5cb8f90ddf5d8cd104e3315058a5792afd3facf7

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      991f83c9b57cb163de279b5bcd3bf2a73889ca51ca3cbc1e4debb9ce95385a78

    • Size

      490KB

    • MD5

      710ee64e7858b761d0be628f04f1f7cd

    • SHA1

      08778eb54f03561da6ad1e2febb147d4dd437682

    • SHA256

      991f83c9b57cb163de279b5bcd3bf2a73889ca51ca3cbc1e4debb9ce95385a78

    • SHA512

      16440e8349dbfce57ce8d6139eeb3b5a1231974967c2e9537f4fe637b94bae52297b390ae0c59d9c7f325a9a5cb8f90ddf5d8cd104e3315058a5792afd3facf7

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks