General

  • Target

    564dcab3b5c6686bd41058b6d220c40559ba786e0257862ac15a4c847ceacbd9

  • Size

    490KB

  • Sample

    220221-lqrp2sacal

  • MD5

    054bc21929b6d00d8a2af28a66ffcb76

  • SHA1

    0bf65c3286a774cc44948a216e74cec33f58adbe

  • SHA256

    564dcab3b5c6686bd41058b6d220c40559ba786e0257862ac15a4c847ceacbd9

  • SHA512

    aacc423127364404806fd3bc86be23880b2288e79b00ee272eb16ec561b80505d88927f1945d55ea00ac930a605e69232a005d74d71617903d11055faa1eb96a

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      564dcab3b5c6686bd41058b6d220c40559ba786e0257862ac15a4c847ceacbd9

    • Size

      490KB

    • MD5

      054bc21929b6d00d8a2af28a66ffcb76

    • SHA1

      0bf65c3286a774cc44948a216e74cec33f58adbe

    • SHA256

      564dcab3b5c6686bd41058b6d220c40559ba786e0257862ac15a4c847ceacbd9

    • SHA512

      aacc423127364404806fd3bc86be23880b2288e79b00ee272eb16ec561b80505d88927f1945d55ea00ac930a605e69232a005d74d71617903d11055faa1eb96a

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Enterprise v6

Tasks