General

  • Target

    bde2484fa3891b6b76039fb19e90102ca67fdae7c9de2a6a4bec34ba340c70d6

  • Size

    251KB

  • Sample

    220319-qfn9dsaefr

  • MD5

    348575b34fadd6b1196a1c7cb0659b2c

  • SHA1

    cb719b86267c1198573a0d9c383dd60d35469e2a

  • SHA256

    bde2484fa3891b6b76039fb19e90102ca67fdae7c9de2a6a4bec34ba340c70d6

  • SHA512

    ed67c1be12814ca5cb5d9dc299e8d168a2ab4b9c0ee0300a30093794b51cf9b9af4024f272634d05c8d9e858e887d030f0758b5f10ac44c4ee9527175aaed2fd

Malware Config

Extracted

Family

icedid

C2

asewter.site

armyguerro.top

Targets

    • Target

      bde2484fa3891b6b76039fb19e90102ca67fdae7c9de2a6a4bec34ba340c70d6

    • Size

      251KB

    • MD5

      348575b34fadd6b1196a1c7cb0659b2c

    • SHA1

      cb719b86267c1198573a0d9c383dd60d35469e2a

    • SHA256

      bde2484fa3891b6b76039fb19e90102ca67fdae7c9de2a6a4bec34ba340c70d6

    • SHA512

      ed67c1be12814ca5cb5d9dc299e8d168a2ab4b9c0ee0300a30093794b51cf9b9af4024f272634d05c8d9e858e887d030f0758b5f10ac44c4ee9527175aaed2fd

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks