General

  • Target

    e699ebb6a6f89d1febb67a0341e7ed1be52982562f8c5af8ed69a178c57b69b9

  • Size

    490KB

  • Sample

    220221-lqr1taacar

  • MD5

    1715c7568f1ce08f53fdf17a93606735

  • SHA1

    ac2b4dbe3c83b6384e1eaffd43da7ade765e3c98

  • SHA256

    e699ebb6a6f89d1febb67a0341e7ed1be52982562f8c5af8ed69a178c57b69b9

  • SHA512

    45e297d75e8441d2c9d1a8cb99c8fb1d86e76b2f38eac5ebb98697b4f2896865d6f763c41bf2d6d2afd4aaa0f2fdc15d6b4bbef6729a0f905eb9a109b12746a5

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      e699ebb6a6f89d1febb67a0341e7ed1be52982562f8c5af8ed69a178c57b69b9

    • Size

      490KB

    • MD5

      1715c7568f1ce08f53fdf17a93606735

    • SHA1

      ac2b4dbe3c83b6384e1eaffd43da7ade765e3c98

    • SHA256

      e699ebb6a6f89d1febb67a0341e7ed1be52982562f8c5af8ed69a178c57b69b9

    • SHA512

      45e297d75e8441d2c9d1a8cb99c8fb1d86e76b2f38eac5ebb98697b4f2896865d6f763c41bf2d6d2afd4aaa0f2fdc15d6b4bbef6729a0f905eb9a109b12746a5

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Enterprise v6

Tasks