General

  • Target

    f0ad9320f60ef590cee3e78900264c7099ce0ab9abd0529ee8e71a14b46bfa00

  • Size

    310KB

  • Sample

    220330-ak7njahdbq

  • MD5

    b833a80d1b3c8fbc88fd27dfeeb1316b

  • SHA1

    0e60ecbaa1e9fd8b2677177627d4eeb3b6a4ed57

  • SHA256

    f0ad9320f60ef590cee3e78900264c7099ce0ab9abd0529ee8e71a14b46bfa00

  • SHA512

    c27fdb132a0e23f802d3501c0111daf1b8405f311acaf98379d62697ed01e780fb353a6c3cfefb9098dbe50596065fd6c58c787b755e708fb9bf3c0601146196

Malware Config

Extracted

Family

icedid

C2

revopilte3.club

aweragiprooslk.cyou

Targets

    • Target

      f0ad9320f60ef590cee3e78900264c7099ce0ab9abd0529ee8e71a14b46bfa00

    • Size

      310KB

    • MD5

      b833a80d1b3c8fbc88fd27dfeeb1316b

    • SHA1

      0e60ecbaa1e9fd8b2677177627d4eeb3b6a4ed57

    • SHA256

      f0ad9320f60ef590cee3e78900264c7099ce0ab9abd0529ee8e71a14b46bfa00

    • SHA512

      c27fdb132a0e23f802d3501c0111daf1b8405f311acaf98379d62697ed01e780fb353a6c3cfefb9098dbe50596065fd6c58c787b755e708fb9bf3c0601146196

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks