General

  • Target

    51c5710fbad680e386041b316cffad781133a5c21acc1fca509bebc1dc4ddbf6

  • Size

    143KB

  • Sample

    220319-nw8a4ahbc2

  • MD5

    a571e2f0069549d7bed9d4ac67fc98bd

  • SHA1

    dbf47c38a24f9c81720cb5b955fb496bb337117c

  • SHA256

    51c5710fbad680e386041b316cffad781133a5c21acc1fca509bebc1dc4ddbf6

  • SHA512

    614553677dccdb06eeb9d36987c67b0fad41f086b13a298fbc768d131a16bca006a428091329e066c356ae05013e85eb897cb2a3cc6f31a9f32b0e18e9422b2d

Malware Config

Extracted

Family

icedid

C2

felpojdhf8980.cyou

azoperfdeoti85.xyz

Targets

    • Target

      51c5710fbad680e386041b316cffad781133a5c21acc1fca509bebc1dc4ddbf6

    • Size

      143KB

    • MD5

      a571e2f0069549d7bed9d4ac67fc98bd

    • SHA1

      dbf47c38a24f9c81720cb5b955fb496bb337117c

    • SHA256

      51c5710fbad680e386041b316cffad781133a5c21acc1fca509bebc1dc4ddbf6

    • SHA512

      614553677dccdb06eeb9d36987c67b0fad41f086b13a298fbc768d131a16bca006a428091329e066c356ae05013e85eb897cb2a3cc6f31a9f32b0e18e9422b2d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks