General

  • Target

    6090a706d8dd0d654ee0104e9935bd9b13e8c4c23c095d5b9d58954c94121c7b

  • Size

    490KB

  • Sample

    220221-lssecshhb2

  • MD5

    e4913d3cf85a10a53e365ce96be8e7d2

  • SHA1

    2e0b999d85056f110ff073f86233c97902b1e4e4

  • SHA256

    6090a706d8dd0d654ee0104e9935bd9b13e8c4c23c095d5b9d58954c94121c7b

  • SHA512

    6aae7f5769ed641781d55cad7dbb372d5b94a5eb88cdcfc2837353f8405eb068ef01bafffe8f7eb8c98b7ad855e4fb4c4fe1a5c5c0ed37b0bfbf2b3789526326

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      6090a706d8dd0d654ee0104e9935bd9b13e8c4c23c095d5b9d58954c94121c7b

    • Size

      490KB

    • MD5

      e4913d3cf85a10a53e365ce96be8e7d2

    • SHA1

      2e0b999d85056f110ff073f86233c97902b1e4e4

    • SHA256

      6090a706d8dd0d654ee0104e9935bd9b13e8c4c23c095d5b9d58954c94121c7b

    • SHA512

      6aae7f5769ed641781d55cad7dbb372d5b94a5eb88cdcfc2837353f8405eb068ef01bafffe8f7eb8c98b7ad855e4fb4c4fe1a5c5c0ed37b0bfbf2b3789526326

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks