General

  • Target

    dart.dll

  • Size

    148KB

  • Sample

    220321-x6924sdfa4

  • MD5

    b20d49ba5d4c4a6e089b895de8949279

  • SHA1

    8f23d9a24ba792706ca19d633f6a925e311670d6

  • SHA256

    db5cabe22595607a408fa30bdf288c0992bff836d2e62f6de98d8757f9805e9b

  • SHA512

    7c45c6565e9e55e9473c707c2001459140016d4133cba5df5083961d6b93d3756ee4a239be5d4c25aa22351f713fb3b564397994d7124a624358f2fbe7e4a540

Malware Config

Extracted

Family

icedid

Campaign

3546287305

C2

oceriesfornot.top

Targets

    • Target

      dart.dll

    • Size

      148KB

    • MD5

      b20d49ba5d4c4a6e089b895de8949279

    • SHA1

      8f23d9a24ba792706ca19d633f6a925e311670d6

    • SHA256

      db5cabe22595607a408fa30bdf288c0992bff836d2e62f6de98d8757f9805e9b

    • SHA512

      7c45c6565e9e55e9473c707c2001459140016d4133cba5df5083961d6b93d3756ee4a239be5d4c25aa22351f713fb3b564397994d7124a624358f2fbe7e4a540

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks