General

  • Target

    7bccfc61a20ca41af1dda01f9032ca365da092ade00699fe119eb63810b57da9

  • Size

    120KB

  • Sample

    220319-p266naabcm

  • MD5

    b2b8bb419ba5c755a2421fa4837edb8a

  • SHA1

    5c6b77d47ab76bbb18be66406b312279ac8d3a43

  • SHA256

    7bccfc61a20ca41af1dda01f9032ca365da092ade00699fe119eb63810b57da9

  • SHA512

    4a956933949a581124c6dfbdbe85da6cd202c0b9f7f7dacca12ca221c580ee63487af0c4f82c6c896febc97c3974b4ef85d60d735c5bc95b5618a4e616731d99

Malware Config

Extracted

Family

icedid

C2

cloudsappert.best

arrowcaps.top

Targets

    • Target

      7bccfc61a20ca41af1dda01f9032ca365da092ade00699fe119eb63810b57da9

    • Size

      120KB

    • MD5

      b2b8bb419ba5c755a2421fa4837edb8a

    • SHA1

      5c6b77d47ab76bbb18be66406b312279ac8d3a43

    • SHA256

      7bccfc61a20ca41af1dda01f9032ca365da092ade00699fe119eb63810b57da9

    • SHA512

      4a956933949a581124c6dfbdbe85da6cd202c0b9f7f7dacca12ca221c580ee63487af0c4f82c6c896febc97c3974b4ef85d60d735c5bc95b5618a4e616731d99

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks