General

  • Target

    f65e7788b966d3fffa3a2161af96cc7d8a73b6b51671f81c99d1e62c3d78a870

  • Size

    490KB

  • Sample

    220221-lssecshhb3

  • MD5

    03a162a55b1120634270d28e48ced24a

  • SHA1

    ef16cd563bd8cf10e1ac406bc2ead1d7bf37eda4

  • SHA256

    f65e7788b966d3fffa3a2161af96cc7d8a73b6b51671f81c99d1e62c3d78a870

  • SHA512

    1d5b73eabd31724775e0c1d3aa8d70276e84121f1aa15cfa81d5dae86ee7a73410b9eda382736c907b1e2a4c27503b64139a112a43666c9604060f3a3b66a096

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      f65e7788b966d3fffa3a2161af96cc7d8a73b6b51671f81c99d1e62c3d78a870

    • Size

      490KB

    • MD5

      03a162a55b1120634270d28e48ced24a

    • SHA1

      ef16cd563bd8cf10e1ac406bc2ead1d7bf37eda4

    • SHA256

      f65e7788b966d3fffa3a2161af96cc7d8a73b6b51671f81c99d1e62c3d78a870

    • SHA512

      1d5b73eabd31724775e0c1d3aa8d70276e84121f1aa15cfa81d5dae86ee7a73410b9eda382736c907b1e2a4c27503b64139a112a43666c9604060f3a3b66a096

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks