General

  • Target

    fb3a40e249ebffa480b40c6cddb2c2b7b9838236bf36d9f8d2f575c859e6e82d

  • Size

    143KB

  • Sample

    220319-jmwhqaeac6

  • MD5

    50c4de83c454b6189ff3790725b0cdaa

  • SHA1

    1eded9bc8ef849de0b17ecaac93fbda8f148f3f4

  • SHA256

    fb3a40e249ebffa480b40c6cddb2c2b7b9838236bf36d9f8d2f575c859e6e82d

  • SHA512

    45241bacc22c435b491f7f8fb1ace3184a55f67755170e3cb620f7c80decbc83192bdb814958d8df5caaf105d9c68532caa75b7e6620114b076d652849860712

Malware Config

Extracted

Family

icedid

C2

felpojdhf8980.cyou

azoperfdeoti85.xyz

Targets

    • Target

      fb3a40e249ebffa480b40c6cddb2c2b7b9838236bf36d9f8d2f575c859e6e82d

    • Size

      143KB

    • MD5

      50c4de83c454b6189ff3790725b0cdaa

    • SHA1

      1eded9bc8ef849de0b17ecaac93fbda8f148f3f4

    • SHA256

      fb3a40e249ebffa480b40c6cddb2c2b7b9838236bf36d9f8d2f575c859e6e82d

    • SHA512

      45241bacc22c435b491f7f8fb1ace3184a55f67755170e3cb620f7c80decbc83192bdb814958d8df5caaf105d9c68532caa75b7e6620114b076d652849860712

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks