General

  • Target

    de876c893ff521367bf117909a1a7760ec8a65d64b94a0d70cfbb0644443fc8c

  • Size

    490KB

  • Sample

    220221-lqsmcaacbp

  • MD5

    7b13d75b2c889a5358200ba16f1cd4bf

  • SHA1

    158a4be536b439727fd563be00fdda37c4185149

  • SHA256

    de876c893ff521367bf117909a1a7760ec8a65d64b94a0d70cfbb0644443fc8c

  • SHA512

    6733437407b81fb2ac4c3de85f8dae218fe5a67f685009b342f50f9431a088123eb4a1f9f259a2a3893560f5509bdf48ae11e3401698dfd35e8f9a7e18d88544

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      de876c893ff521367bf117909a1a7760ec8a65d64b94a0d70cfbb0644443fc8c

    • Size

      490KB

    • MD5

      7b13d75b2c889a5358200ba16f1cd4bf

    • SHA1

      158a4be536b439727fd563be00fdda37c4185149

    • SHA256

      de876c893ff521367bf117909a1a7760ec8a65d64b94a0d70cfbb0644443fc8c

    • SHA512

      6733437407b81fb2ac4c3de85f8dae218fe5a67f685009b342f50f9431a088123eb4a1f9f259a2a3893560f5509bdf48ae11e3401698dfd35e8f9a7e18d88544

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks