General

  • Target

    93046c670e85d02372a420e388ab0fb142a0ab3b047bacac84ba4cf7e6785aa0

  • Size

    120KB

  • Sample

    220307-ph2f3ahbgr

  • MD5

    231094ba4a8a3584a78cfbe7f72413af

  • SHA1

    2d6f8446d0e0f713a83c5c0a8d408dcf665e3e75

  • SHA256

    93046c670e85d02372a420e388ab0fb142a0ab3b047bacac84ba4cf7e6785aa0

  • SHA512

    8ffb95bf5a4e60b84751387210f99b520d200595a733fad253197a1430933e29719bb5325897e46f4417013db34fd5b58b8699220b0c33f5e07397f7f3a82ae0

Malware Config

Extracted

Family

icedid

C2

400prettyboy.best

follerring.best

Targets

    • Target

      93046c670e85d02372a420e388ab0fb142a0ab3b047bacac84ba4cf7e6785aa0

    • Size

      120KB

    • MD5

      231094ba4a8a3584a78cfbe7f72413af

    • SHA1

      2d6f8446d0e0f713a83c5c0a8d408dcf665e3e75

    • SHA256

      93046c670e85d02372a420e388ab0fb142a0ab3b047bacac84ba4cf7e6785aa0

    • SHA512

      8ffb95bf5a4e60b84751387210f99b520d200595a733fad253197a1430933e29719bb5325897e46f4417013db34fd5b58b8699220b0c33f5e07397f7f3a82ae0

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks