General

  • Target

    720df95ad8c9e735994996b4f2f7e0722f0962bc429b6da34596713d3f02732c

  • Size

    199KB

  • Sample

    220307-mt4dpagcfr

  • MD5

    6b2b44d68c394560e08edfc615e53ef1

  • SHA1

    c8dde11b1047d257bb823cb75af22932f0074ad7

  • SHA256

    720df95ad8c9e735994996b4f2f7e0722f0962bc429b6da34596713d3f02732c

  • SHA512

    92e9c495725011d38bb87a1938515a720e86d7dfdb93563999a721a40bbba8991c3a43ccdf937a86377b4c31679191f4c3d5b0fdfb09b3588e2b5621f0fb033b

Malware Config

Extracted

Family

icedid

C2

rockercastle.best

moviecastle.club

Targets

    • Target

      720df95ad8c9e735994996b4f2f7e0722f0962bc429b6da34596713d3f02732c

    • Size

      199KB

    • MD5

      6b2b44d68c394560e08edfc615e53ef1

    • SHA1

      c8dde11b1047d257bb823cb75af22932f0074ad7

    • SHA256

      720df95ad8c9e735994996b4f2f7e0722f0962bc429b6da34596713d3f02732c

    • SHA512

      92e9c495725011d38bb87a1938515a720e86d7dfdb93563999a721a40bbba8991c3a43ccdf937a86377b4c31679191f4c3d5b0fdfb09b3588e2b5621f0fb033b

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks