General

  • Target

    e53d741ec3acc8a6d77be7c8256df7914b5ca889c0fe2712afd8c2c5b6947e22

  • Size

    490KB

  • Sample

    220221-lqsbksacbl

  • MD5

    050baba3f74ed494f1dbdca89c76785f

  • SHA1

    8c5ace69bfe3556be3c9fffe8aa95a56d9ed78f5

  • SHA256

    e53d741ec3acc8a6d77be7c8256df7914b5ca889c0fe2712afd8c2c5b6947e22

  • SHA512

    6a96dbf0caacfbfc4780b9eea20ac65fc6e4f738a6a1e1e72e5c2852858c81854cc2b8688d06b981cc05e98c9437673eee3159ea0cdabc494c579cad971b24a0

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      e53d741ec3acc8a6d77be7c8256df7914b5ca889c0fe2712afd8c2c5b6947e22

    • Size

      490KB

    • MD5

      050baba3f74ed494f1dbdca89c76785f

    • SHA1

      8c5ace69bfe3556be3c9fffe8aa95a56d9ed78f5

    • SHA256

      e53d741ec3acc8a6d77be7c8256df7914b5ca889c0fe2712afd8c2c5b6947e22

    • SHA512

      6a96dbf0caacfbfc4780b9eea20ac65fc6e4f738a6a1e1e72e5c2852858c81854cc2b8688d06b981cc05e98c9437673eee3159ea0cdabc494c579cad971b24a0

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks