General

  • Target

    5b8b3ae9cb90a4ad87b06d35805f1d1cae61c2c9fc560b3020b5c6954ee7d8b9

  • Size

    188KB

  • Sample

    220319-nlvx1sggf8

  • MD5

    28e2fd15957f7e681c309ea3f322b6fb

  • SHA1

    107cc5d441c8f03ecb94086ce448cd14dbf52470

  • SHA256

    5b8b3ae9cb90a4ad87b06d35805f1d1cae61c2c9fc560b3020b5c6954ee7d8b9

  • SHA512

    6df7900a3de3c2b0192f541a33491e32de2d27371dd49639a488f580d77574aa7b001da877b0213f53c047f43402f237756125cbb862fc918c98e6a7dafb5dbc

Malware Config

Extracted

Family

icedid

Targets

    • Target

      5b8b3ae9cb90a4ad87b06d35805f1d1cae61c2c9fc560b3020b5c6954ee7d8b9

    • Size

      188KB

    • MD5

      28e2fd15957f7e681c309ea3f322b6fb

    • SHA1

      107cc5d441c8f03ecb94086ce448cd14dbf52470

    • SHA256

      5b8b3ae9cb90a4ad87b06d35805f1d1cae61c2c9fc560b3020b5c6954ee7d8b9

    • SHA512

      6df7900a3de3c2b0192f541a33491e32de2d27371dd49639a488f580d77574aa7b001da877b0213f53c047f43402f237756125cbb862fc918c98e6a7dafb5dbc

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks