General

  • Target

    01fcd9b0a5316bd432dc7e889a07fbfed672f4121c6be1d97c7dc29a6a4ebaf4

  • Size

    208KB

  • Sample

    220324-x3qt3aaadk

  • MD5

    56ff3fa59ad51e68f27a7fc8dac0764f

  • SHA1

    9e78f1745c92cb28de9cca746180f0dac7244edc

  • SHA256

    01fcd9b0a5316bd432dc7e889a07fbfed672f4121c6be1d97c7dc29a6a4ebaf4

  • SHA512

    9b10788340238ae7bc0cf9dc64e9aac7ce6bef2a335bf0283c949f81f477b9c44fc0dcf2b54c9f0b485a5c12e6d0fe5a5ea61695dae088097248f0f8736d3dbb

Malware Config

Extracted

Family

icedid

C2

rockercastle.best

moviecastle.club

Targets

    • Target

      01fcd9b0a5316bd432dc7e889a07fbfed672f4121c6be1d97c7dc29a6a4ebaf4

    • Size

      208KB

    • MD5

      56ff3fa59ad51e68f27a7fc8dac0764f

    • SHA1

      9e78f1745c92cb28de9cca746180f0dac7244edc

    • SHA256

      01fcd9b0a5316bd432dc7e889a07fbfed672f4121c6be1d97c7dc29a6a4ebaf4

    • SHA512

      9b10788340238ae7bc0cf9dc64e9aac7ce6bef2a335bf0283c949f81f477b9c44fc0dcf2b54c9f0b485a5c12e6d0fe5a5ea61695dae088097248f0f8736d3dbb

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks