General

  • Target

    a1d05aa1324fdc04e7698fbc3a4f212013b2bf7d7531b317d0b76e832d97a841

  • Size

    104KB

  • Sample

    220329-x1m1dsecfr

  • MD5

    bf5309d3536cb55f8a052ad35576866f

  • SHA1

    db0d76c50077280cc66b6d7c0084472575c235f8

  • SHA256

    a1d05aa1324fdc04e7698fbc3a4f212013b2bf7d7531b317d0b76e832d97a841

  • SHA512

    ff06f9b89ca1e886887e5866f90775c2e56701491215e99d933b786ec75758095c00dba22ec5daba5a7ed1bdb3fab415ddb5922715bd3da32e237dca50ada4c8

Malware Config

Extracted

Family

icedid

Campaign

1798566902

C2

rivertimad.com

Targets

    • Target

      a1d05aa1324fdc04e7698fbc3a4f212013b2bf7d7531b317d0b76e832d97a841

    • Size

      104KB

    • MD5

      bf5309d3536cb55f8a052ad35576866f

    • SHA1

      db0d76c50077280cc66b6d7c0084472575c235f8

    • SHA256

      a1d05aa1324fdc04e7698fbc3a4f212013b2bf7d7531b317d0b76e832d97a841

    • SHA512

      ff06f9b89ca1e886887e5866f90775c2e56701491215e99d933b786ec75758095c00dba22ec5daba5a7ed1bdb3fab415ddb5922715bd3da32e237dca50ada4c8

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks