General

  • Target

    dar.dll

  • Size

    142KB

  • Sample

    220323-w1f2eaaag7

  • MD5

    1469ce7ec910ec525d86acbc5cee9858

  • SHA1

    5339edc96e8071258c0615b2de09df40ac79a8dc

  • SHA256

    17aeebe6c1098a312074b0fdeae6f97339f2d64d66a2b07496bfc1373694a4e3

  • SHA512

    6785695744c06594e6651a601710a48e54a744333bd3d1e39f3bed1408d8d0a8e91229fc79ee453fc7feed1bfe8e01a4aef91237e742b98b416c39e1788d144a

Malware Config

Extracted

Family

icedid

Campaign

429479428

C2

arelyevennot.top

Targets

    • Target

      dar.dll

    • Size

      142KB

    • MD5

      1469ce7ec910ec525d86acbc5cee9858

    • SHA1

      5339edc96e8071258c0615b2de09df40ac79a8dc

    • SHA256

      17aeebe6c1098a312074b0fdeae6f97339f2d64d66a2b07496bfc1373694a4e3

    • SHA512

      6785695744c06594e6651a601710a48e54a744333bd3d1e39f3bed1408d8d0a8e91229fc79ee453fc7feed1bfe8e01a4aef91237e742b98b416c39e1788d144a

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks