General

  • Target

    5410786228469760.zip

  • Size

    852KB

  • Sample

    220310-rjfxvsffd4

  • MD5

    53ce4488249ac7b3cfa1637ad6000a96

  • SHA1

    ada37b54632b28f67832d8665ca46f4b2e0f0e95

  • SHA256

    f17327ed526909a2491f824f4f7713a5262c3088a1671a304f180ccfe9f58327

  • SHA512

    c7cfe337074894432381049314b54491eba9e8d5277314af5bfa90c308af82049d3b836617dce475e81dab2ae23b634e3bb75b54bbed35ebb2169bde2d33a4af

Malware Config

Extracted

Family

icedid

Campaign

494770699

C2

oceriesfornot.top

Targets

    • Target

      101b6b6bec4ae6e698d793d1f9d1a905c03bac2da987ba68033a16fed414a95c

    • Size

      1.6MB

    • MD5

      397640d8c42e1f06cc45fb6ce689be8b

    • SHA1

      8e56c7883ad7eefa314b9a4f234f1b59a9e7f8fb

    • SHA256

      101b6b6bec4ae6e698d793d1f9d1a905c03bac2da987ba68033a16fed414a95c

    • SHA512

      60708d311b7bd473f6981de94ccfea05c22e956944c675ac9b457b2585e53d5bd132db70a1df9dbb9b7c1077c6b819cf4cbbc57b18503d8602442a3415ba8166

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks