General

  • Target

    minro.exe

  • Size

    124KB

  • Sample

    220330-ax7t3adde3

  • MD5

    6187867745754121e5b29c16e05e6164

  • SHA1

    daeb28c0e2db1dd78caff0d4b9d863d1f8656e47

  • SHA256

    617e0f57f4283ca044003326663b5614d66f97e16bccdd8bec1321fad44a7195

  • SHA512

    88b04366e121c02bd6f74f1ff5f305a87e91eb97b00ee4dbbe84761e407e26b3af262b84f9f47fc87a7277c334106a93bd7ba75a1a40f3b82b6c0f418adb3d02

Malware Config

Extracted

Family

icedid

Campaign

1666752692

C2

ritionalvalueon.top

Targets

    • Target

      minro.exe

    • Size

      124KB

    • MD5

      6187867745754121e5b29c16e05e6164

    • SHA1

      daeb28c0e2db1dd78caff0d4b9d863d1f8656e47

    • SHA256

      617e0f57f4283ca044003326663b5614d66f97e16bccdd8bec1321fad44a7195

    • SHA512

      88b04366e121c02bd6f74f1ff5f305a87e91eb97b00ee4dbbe84761e407e26b3af262b84f9f47fc87a7277c334106a93bd7ba75a1a40f3b82b6c0f418adb3d02

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks