General

  • Target

    4f0950ffbf865d916ccdfcce9cd69fca93b33225c92b23b8ca948137ea28fa66

  • Size

    490KB

  • Sample

    220221-lssecsahek

  • MD5

    8fe8de6b9bbd54ce2ceb99ccff7d50ad

  • SHA1

    d903c898fe86cac05403a2b12fc61da9b315d3b5

  • SHA256

    4f0950ffbf865d916ccdfcce9cd69fca93b33225c92b23b8ca948137ea28fa66

  • SHA512

    499cc1315e2c2708a19bbcd5157c47ace6cbb95c7748890383243b5aa657e2b1b41859c8bc16839696d504eeeaebb9310b7baac9eef0726fc6f6890ecb51e457

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      4f0950ffbf865d916ccdfcce9cd69fca93b33225c92b23b8ca948137ea28fa66

    • Size

      490KB

    • MD5

      8fe8de6b9bbd54ce2ceb99ccff7d50ad

    • SHA1

      d903c898fe86cac05403a2b12fc61da9b315d3b5

    • SHA256

      4f0950ffbf865d916ccdfcce9cd69fca93b33225c92b23b8ca948137ea28fa66

    • SHA512

      499cc1315e2c2708a19bbcd5157c47ace6cbb95c7748890383243b5aa657e2b1b41859c8bc16839696d504eeeaebb9310b7baac9eef0726fc6f6890ecb51e457

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks