General

  • Target

    f2e08df6880d599f89c5b4d5497164ab4489e79c233555c53031a90b02d11f51.exe

  • Size

    596KB

  • Sample

    220225-zlcbfsaeem

  • MD5

    7f2fe3d160080e09ea51d58ab0e1ae8f

  • SHA1

    5a84cccf6640f5cd8ea69e93ccbb97aa15f0968e

  • SHA256

    f2e08df6880d599f89c5b4d5497164ab4489e79c233555c53031a90b02d11f51

  • SHA512

    978bfecf51833c4ea03bddccac1c3325cf2b67d8083ae5be87e882e807af51b09c181a2b44f36ab03ecdc38be6e018e1d233e9030d3f029fea1e906df26ed0c5

Malware Config

Extracted

Family

icedid

Campaign

1117948791

C2

reseptors.com

Targets

    • Target

      f2e08df6880d599f89c5b4d5497164ab4489e79c233555c53031a90b02d11f51.exe

    • Size

      596KB

    • MD5

      7f2fe3d160080e09ea51d58ab0e1ae8f

    • SHA1

      5a84cccf6640f5cd8ea69e93ccbb97aa15f0968e

    • SHA256

      f2e08df6880d599f89c5b4d5497164ab4489e79c233555c53031a90b02d11f51

    • SHA512

      978bfecf51833c4ea03bddccac1c3325cf2b67d8083ae5be87e882e807af51b09c181a2b44f36ab03ecdc38be6e018e1d233e9030d3f029fea1e906df26ed0c5

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks