General

  • Target

    a165afab97fecd6212eb82933abd224eaca434202023e4e36f6698f4334cfc96

  • Size

    490KB

  • Sample

    220221-lssecsahel

  • MD5

    bc65544733d6c44a373ec85b51f049e7

  • SHA1

    a6028e343dbef3a6aa01d37aafe64a6e9c76aa4f

  • SHA256

    a165afab97fecd6212eb82933abd224eaca434202023e4e36f6698f4334cfc96

  • SHA512

    b336462f4cf7de4c1916ec440f6b370bef3c5f15dbc81d74b7df90786359bd374d35d94fd5864d81c14fef6e4d6edd622627912ebd48524494e162eea4a067e9

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      a165afab97fecd6212eb82933abd224eaca434202023e4e36f6698f4334cfc96

    • Size

      490KB

    • MD5

      bc65544733d6c44a373ec85b51f049e7

    • SHA1

      a6028e343dbef3a6aa01d37aafe64a6e9c76aa4f

    • SHA256

      a165afab97fecd6212eb82933abd224eaca434202023e4e36f6698f4334cfc96

    • SHA512

      b336462f4cf7de4c1916ec440f6b370bef3c5f15dbc81d74b7df90786359bd374d35d94fd5864d81c14fef6e4d6edd622627912ebd48524494e162eea4a067e9

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks