General

  • Target

    0728a76febf93a8bf5b5edc9335655f93f44f46fde1346fc2a249b4cafb83220

  • Size

    310KB

  • Sample

    220326-q29gfsddd9

  • MD5

    baa53d9297c81190b5407770518a2f6a

  • SHA1

    8d59337ae56b46c96c5454d1dabb33e0fa1eef39

  • SHA256

    0728a76febf93a8bf5b5edc9335655f93f44f46fde1346fc2a249b4cafb83220

  • SHA512

    b618aa7ae10a181b87ed2c1767a5ac3cbacbf68d58ab21f84891a657eb49a638a4a7e9d1dde99719528d90dbc6fd099421adba8900b034d942c06edd63b8a12d

Malware Config

Extracted

Family

icedid

C2

revopilte3.club

aweragiprooslk.cyou

Targets

    • Target

      0728a76febf93a8bf5b5edc9335655f93f44f46fde1346fc2a249b4cafb83220

    • Size

      310KB

    • MD5

      baa53d9297c81190b5407770518a2f6a

    • SHA1

      8d59337ae56b46c96c5454d1dabb33e0fa1eef39

    • SHA256

      0728a76febf93a8bf5b5edc9335655f93f44f46fde1346fc2a249b4cafb83220

    • SHA512

      b618aa7ae10a181b87ed2c1767a5ac3cbacbf68d58ab21f84891a657eb49a638a4a7e9d1dde99719528d90dbc6fd099421adba8900b034d942c06edd63b8a12d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks