General

  • Target

    2b7fb3f85ce2ac7167e780c8a9f60741d474a3f785e9f564ef0b8b106b733324.dll

  • Size

    19KB

  • Sample

    220312-s72pxaaghj

  • MD5

    7dc7b8135515350b677e2ceefb966c20

  • SHA1

    31295fb3590adcc0f58999a972e1ef53520deb3d

  • SHA256

    2b7fb3f85ce2ac7167e780c8a9f60741d474a3f785e9f564ef0b8b106b733324

  • SHA512

    a33cf4e68845c217bc71fa544e6ef542abd25818f724881f6c8400748927eb224f1f0644860dea65db99ab536d013ef1d1129a77567a822fbe25e5438bdb17cd

Malware Config

Extracted

Family

icedid

Campaign

2401334462

Targets

    • Target

      2b7fb3f85ce2ac7167e780c8a9f60741d474a3f785e9f564ef0b8b106b733324.dll

    • Size

      19KB

    • MD5

      7dc7b8135515350b677e2ceefb966c20

    • SHA1

      31295fb3590adcc0f58999a972e1ef53520deb3d

    • SHA256

      2b7fb3f85ce2ac7167e780c8a9f60741d474a3f785e9f564ef0b8b106b733324

    • SHA512

      a33cf4e68845c217bc71fa544e6ef542abd25818f724881f6c8400748927eb224f1f0644860dea65db99ab536d013ef1d1129a77567a822fbe25e5438bdb17cd

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks