Resubmissions

25-02-2022 13:47

220225-q324rsgce5 10

25-02-2022 13:42

220225-qz4hesgcd7 1

25-02-2022 07:59

220225-jvqbnsgfen 10

24-02-2022 18:59

220224-xm42radec7 1

General

  • Target

    data.dll

  • Size

    635KB

  • Sample

    220225-jvqbnsgfen

  • MD5

    037108e76aea0fb082896b0dfa806a8a

  • SHA1

    cc1035bbb80813ba53ae7ad74b8649a4c696e9a1

  • SHA256

    90c29a66209be554dfbd2740f6a54d12616da35d0e5e4af97eb2376b9d053457

  • SHA512

    ebb5fb84a4a1e654de8f7d38dc22d0586266ae58baee9304cd290ba34bcdf8328c7c3c0c243bc996e5e6134fa3aa0948bfc8651259fd3f258722e0da525d9971

Malware Config

Extracted

Family

icedid

Campaign

952864090

C2

biglaneat.com

Targets

    • Target

      data.dll

    • Size

      635KB

    • MD5

      037108e76aea0fb082896b0dfa806a8a

    • SHA1

      cc1035bbb80813ba53ae7ad74b8649a4c696e9a1

    • SHA256

      90c29a66209be554dfbd2740f6a54d12616da35d0e5e4af97eb2376b9d053457

    • SHA512

      ebb5fb84a4a1e654de8f7d38dc22d0586266ae58baee9304cd290ba34bcdf8328c7c3c0c243bc996e5e6134fa3aa0948bfc8651259fd3f258722e0da525d9971

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks