General

  • Target

    54eb9f1f9ecae58508615cc2e9d2266b6cb2408b0b285eeb2eb49e87308fff7d

  • Size

    346KB

  • Sample

    220330-amaftadca8

  • MD5

    1a29e018e97c8f2bf11bec011749b78d

  • SHA1

    0e09fcd491143eed3b33ba2c6ffc8b943fccb3b8

  • SHA256

    54eb9f1f9ecae58508615cc2e9d2266b6cb2408b0b285eeb2eb49e87308fff7d

  • SHA512

    8747f7e32e9848a3d13e441301f7f790bbd0a202762e7ad8f547930d80f8dbefbe2473f1bcbc72322f5ca1fd68fd7db1b0fe3a22589fd8a1cd88f4df9eec9da4

Malware Config

Extracted

Family

icedid

Targets

    • Target

      54eb9f1f9ecae58508615cc2e9d2266b6cb2408b0b285eeb2eb49e87308fff7d

    • Size

      346KB

    • MD5

      1a29e018e97c8f2bf11bec011749b78d

    • SHA1

      0e09fcd491143eed3b33ba2c6ffc8b943fccb3b8

    • SHA256

      54eb9f1f9ecae58508615cc2e9d2266b6cb2408b0b285eeb2eb49e87308fff7d

    • SHA512

      8747f7e32e9848a3d13e441301f7f790bbd0a202762e7ad8f547930d80f8dbefbe2473f1bcbc72322f5ca1fd68fd7db1b0fe3a22589fd8a1cd88f4df9eec9da4

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks