General

  • Target

    main1.dll

  • Size

    1.2MB

  • Sample

    220309-2rwcmabgh6

  • MD5

    657b8f163f8fcb7364d0710f69ccdadd

  • SHA1

    aa035a6c9eb17be8065026fa8226c5cbbe7813c5

  • SHA256

    16c00b9d56ad2f7d20409313a85a0a6375047a3a975ccc8e9e80afbf1c20bd5f

  • SHA512

    1d2bc7edc534046bfbf065ec12ff825b1d553a0ff55e82368f657725ab935a7923ad71529eac42b56f37492c063b3592a313d41fb541a2645f90b8b29c79dc52

Malware Config

Extracted

Family

icedid

Campaign

3993579037

C2

yourgroceries.top

Targets

    • Target

      main1.dll

    • Size

      1.2MB

    • MD5

      657b8f163f8fcb7364d0710f69ccdadd

    • SHA1

      aa035a6c9eb17be8065026fa8226c5cbbe7813c5

    • SHA256

      16c00b9d56ad2f7d20409313a85a0a6375047a3a975ccc8e9e80afbf1c20bd5f

    • SHA512

      1d2bc7edc534046bfbf065ec12ff825b1d553a0ff55e82368f657725ab935a7923ad71529eac42b56f37492c063b3592a313d41fb541a2645f90b8b29c79dc52

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks