General

  • Target

    a46d4a8c88eedb7f829d09eed741f8843b76ab28f43b282fa9c5d96f6eab6757

  • Size

    490KB

  • Sample

    220221-lss1wsaheq

  • MD5

    b577a5d6bca871d3d4826a661eaf53a3

  • SHA1

    e79f0ed34b470eda6c996e0864219f12a9516828

  • SHA256

    a46d4a8c88eedb7f829d09eed741f8843b76ab28f43b282fa9c5d96f6eab6757

  • SHA512

    578e880bc275da4aeabffd4327a18ad4b08b57f6b4430867f21b9fced0548d5345bf686c8917033392b97f0b044d48b9a7743b36f2022e31c64cb52666ae2901

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      a46d4a8c88eedb7f829d09eed741f8843b76ab28f43b282fa9c5d96f6eab6757

    • Size

      490KB

    • MD5

      b577a5d6bca871d3d4826a661eaf53a3

    • SHA1

      e79f0ed34b470eda6c996e0864219f12a9516828

    • SHA256

      a46d4a8c88eedb7f829d09eed741f8843b76ab28f43b282fa9c5d96f6eab6757

    • SHA512

      578e880bc275da4aeabffd4327a18ad4b08b57f6b4430867f21b9fced0548d5345bf686c8917033392b97f0b044d48b9a7743b36f2022e31c64cb52666ae2901

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks