General

  • Target

    173789e9cb17726e1fa3c0df123cf93a8d4a4cc1318e000b23845ac12ff51953

  • Size

    490KB

  • Sample

    220221-lssp5aahen

  • MD5

    3f01db35b321217a981f146dcef7e9c2

  • SHA1

    892ccd1250440d27e9bbaaa56cb0ed1c2e8f90d1

  • SHA256

    173789e9cb17726e1fa3c0df123cf93a8d4a4cc1318e000b23845ac12ff51953

  • SHA512

    2b4e8c751c4dceda33339a6d5289a6834208c7d8dd6d5e6011e09cbd0a6766abdbb7df0f8f8fb096547dea43a6b0e47eba78592e6f6bab54800180a3803c0489

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      173789e9cb17726e1fa3c0df123cf93a8d4a4cc1318e000b23845ac12ff51953

    • Size

      490KB

    • MD5

      3f01db35b321217a981f146dcef7e9c2

    • SHA1

      892ccd1250440d27e9bbaaa56cb0ed1c2e8f90d1

    • SHA256

      173789e9cb17726e1fa3c0df123cf93a8d4a4cc1318e000b23845ac12ff51953

    • SHA512

      2b4e8c751c4dceda33339a6d5289a6834208c7d8dd6d5e6011e09cbd0a6766abdbb7df0f8f8fb096547dea43a6b0e47eba78592e6f6bab54800180a3803c0489

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks