General

  • Target

    30f81b3c11852fd03be50bc823241194fa0bc30c5f978b82bab5903361812c85

  • Size

    152KB

  • Sample

    220319-mlmqzafgh4

  • MD5

    6bb4267b2fa66d9c21e4da4c3910cb8b

  • SHA1

    4d42447ecf663d022ee0b326ed5527d819bdd314

  • SHA256

    30f81b3c11852fd03be50bc823241194fa0bc30c5f978b82bab5903361812c85

  • SHA512

    efb6a259a87e0651584af08a78696a34da5848e584bae542094ba9eb99502b1063e5656e16379bc6c6affeb3cf6aaf18a83eba635f5c149a6c5d6323427d2f74

Malware Config

Extracted

Family

icedid

C2

marcingranio.cyou

marzingranocny.top

Targets

    • Target

      30f81b3c11852fd03be50bc823241194fa0bc30c5f978b82bab5903361812c85

    • Size

      152KB

    • MD5

      6bb4267b2fa66d9c21e4da4c3910cb8b

    • SHA1

      4d42447ecf663d022ee0b326ed5527d819bdd314

    • SHA256

      30f81b3c11852fd03be50bc823241194fa0bc30c5f978b82bab5903361812c85

    • SHA512

      efb6a259a87e0651584af08a78696a34da5848e584bae542094ba9eb99502b1063e5656e16379bc6c6affeb3cf6aaf18a83eba635f5c149a6c5d6323427d2f74

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks