General

  • Target

    f8821beacd34d78b9ba31cd3b4b3ff409b3cb212e3f498d9549e177c356c4957

  • Size

    490KB

  • Sample

    220221-lqr1taacaq

  • MD5

    3b2491d42e2b2264dd2d13f35c816a62

  • SHA1

    a6a8305d5ab49af72728507406db0c652229c1d0

  • SHA256

    f8821beacd34d78b9ba31cd3b4b3ff409b3cb212e3f498d9549e177c356c4957

  • SHA512

    f96fb4c6ec83e1a9b33da18039a59587ab7030f6ed78bcc72e12ba58b157a9c501339189fc5f3ef979a00c1ae669fe179640b8fa730f58a257a0f66ccd65cac4

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      f8821beacd34d78b9ba31cd3b4b3ff409b3cb212e3f498d9549e177c356c4957

    • Size

      490KB

    • MD5

      3b2491d42e2b2264dd2d13f35c816a62

    • SHA1

      a6a8305d5ab49af72728507406db0c652229c1d0

    • SHA256

      f8821beacd34d78b9ba31cd3b4b3ff409b3cb212e3f498d9549e177c356c4957

    • SHA512

      f96fb4c6ec83e1a9b33da18039a59587ab7030f6ed78bcc72e12ba58b157a9c501339189fc5f3ef979a00c1ae669fe179640b8fa730f58a257a0f66ccd65cac4

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks