General

  • Target

    46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

  • Size

    158KB

  • Sample

    220319-nj6azaggep

  • MD5

    06c0605f3f242ddfb0347bbdd153d88b

  • SHA1

    e8b326751005b5a6d262d3967315704e7b09f9a1

  • SHA256

    46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

  • SHA512

    e9497c1f6722a96f9a7b29004ebf9bda1976b761b41f55afa98c7edeef156cfcbc35f9c11fd0a22e027154ef34179314e859b2761f070f80ff7640fd1114ad3f

Malware Config

Extracted

Family

icedid

C2

gelevandren.cyou

greenflopper.best

qassertolik.top

wassermannshop.club

Targets

    • Target

      46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

    • Size

      158KB

    • MD5

      06c0605f3f242ddfb0347bbdd153d88b

    • SHA1

      e8b326751005b5a6d262d3967315704e7b09f9a1

    • SHA256

      46b7f631adeb6f339fda1e757f092693723c840f9b20f8f7357098ee730d1f2d

    • SHA512

      e9497c1f6722a96f9a7b29004ebf9bda1976b761b41f55afa98c7edeef156cfcbc35f9c11fd0a22e027154ef34179314e859b2761f070f80ff7640fd1114ad3f

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

      suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks