General

  • Target

    data.dll

  • Size

    568KB

  • Sample

    220224-svsw8seebr

  • MD5

    af31e31bf5757d81cf20626d777c71a6

  • SHA1

    f67586fb95f9361998bd8cf5c64991c4add6afae

  • SHA256

    bca95f8c72826187d1eddc4615ec6f99acbe9ac233ec5bb11bba7b726a2c5c02

  • SHA512

    c58ad9d314d4f09c945b593f6763c821f21c4f535e1b1f41b847b895abfbea70ef90d73aa902c5fbf7b788b94d046ca3449e0c54e1cc8c0835b9fc829cc93bde

Malware Config

Extracted

Family

icedid

Campaign

952864090

C2

biglaneat.com

Targets

    • Target

      data.dll

    • Size

      568KB

    • MD5

      af31e31bf5757d81cf20626d777c71a6

    • SHA1

      f67586fb95f9361998bd8cf5c64991c4add6afae

    • SHA256

      bca95f8c72826187d1eddc4615ec6f99acbe9ac233ec5bb11bba7b726a2c5c02

    • SHA512

      c58ad9d314d4f09c945b593f6763c821f21c4f535e1b1f41b847b895abfbea70ef90d73aa902c5fbf7b788b94d046ca3449e0c54e1cc8c0835b9fc829cc93bde

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Enterprise v6

Tasks