General

  • Target

    ad7dfd8a04411cbe96ee8772a0f67da5ae2cf87bf13e0b286c2de937037cfb7e

  • Size

    232KB

  • Sample

    220316-1f4n7afagj

  • MD5

    98df07ecb8521689dd3a818674a56dba

  • SHA1

    7174ff35230dfcbcd70bc6e4d84f299b717b990c

  • SHA256

    ad7dfd8a04411cbe96ee8772a0f67da5ae2cf87bf13e0b286c2de937037cfb7e

  • SHA512

    c91bbae26f5be163d1de34bc0de3de51af9c7abe9a2e3641f95fc1f7194a2ed616b06744092c3f3a37d17c428e2e61a02f7fcc5c9cdd21d64189cf868b55f6e0

Malware Config

Extracted

Family

icedid

C2

understandingtroll.cyou

rozathetroll.pw

Targets

    • Target

      ad7dfd8a04411cbe96ee8772a0f67da5ae2cf87bf13e0b286c2de937037cfb7e

    • Size

      232KB

    • MD5

      98df07ecb8521689dd3a818674a56dba

    • SHA1

      7174ff35230dfcbcd70bc6e4d84f299b717b990c

    • SHA256

      ad7dfd8a04411cbe96ee8772a0f67da5ae2cf87bf13e0b286c2de937037cfb7e

    • SHA512

      c91bbae26f5be163d1de34bc0de3de51af9c7abe9a2e3641f95fc1f7194a2ed616b06744092c3f3a37d17c428e2e61a02f7fcc5c9cdd21d64189cf868b55f6e0

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks