General

  • Target

    901eef4fca3531fab4b13cf0f9208bbc5010640ed0bcd8b78e40e1737e5b30c3

  • Size

    490KB

  • Sample

    220221-lssp5aahep

  • MD5

    73f869024757fa13d98daf967da98e55

  • SHA1

    13943b68dbd62b4d40860409f1665f6c2b06cf13

  • SHA256

    901eef4fca3531fab4b13cf0f9208bbc5010640ed0bcd8b78e40e1737e5b30c3

  • SHA512

    37ca199bf0d0c952d93e5ebc66115f6b3dd277f0af75def3c7319b6a4199c05587d5e0872ffef2350fb63753e953f61eb9107bb4035289c25e379dfeeebe99ff

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      901eef4fca3531fab4b13cf0f9208bbc5010640ed0bcd8b78e40e1737e5b30c3

    • Size

      490KB

    • MD5

      73f869024757fa13d98daf967da98e55

    • SHA1

      13943b68dbd62b4d40860409f1665f6c2b06cf13

    • SHA256

      901eef4fca3531fab4b13cf0f9208bbc5010640ed0bcd8b78e40e1737e5b30c3

    • SHA512

      37ca199bf0d0c952d93e5ebc66115f6b3dd277f0af75def3c7319b6a4199c05587d5e0872ffef2350fb63753e953f61eb9107bb4035289c25e379dfeeebe99ff

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks