General

  • Target

    0732eb353df00b0073fcabd61c6bc7daa5947fdabdd31237e29adae4ce297392

  • Size

    420KB

  • Sample

    220319-pyra2aaaeq

  • MD5

    5f36fc87c9f0c511354babd373a4c8dd

  • SHA1

    35c6365226d3aedd045794c182b86cd0cd145192

  • SHA256

    0732eb353df00b0073fcabd61c6bc7daa5947fdabdd31237e29adae4ce297392

  • SHA512

    7106855c6cd6fb6ccb8c9784ed355241de58e75539974268355f7b073f55258e34e4a2eed94518e97911897c4a43ea553ee120516c57370dcde22761b5689821

Malware Config

Extracted

Family

icedid

C2

aborigencredit.xyz

ideology8cum.top

Targets

    • Target

      0732eb353df00b0073fcabd61c6bc7daa5947fdabdd31237e29adae4ce297392

    • Size

      420KB

    • MD5

      5f36fc87c9f0c511354babd373a4c8dd

    • SHA1

      35c6365226d3aedd045794c182b86cd0cd145192

    • SHA256

      0732eb353df00b0073fcabd61c6bc7daa5947fdabdd31237e29adae4ce297392

    • SHA512

      7106855c6cd6fb6ccb8c9784ed355241de58e75539974268355f7b073f55258e34e4a2eed94518e97911897c4a43ea553ee120516c57370dcde22761b5689821

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks