General

  • Target

    0107f3408025d36643aace44f1133ab57dfdc9b5c34587c8807ed89455fb127c

  • Size

    208KB

  • Sample

    220414-p74mqacfh7

  • MD5

    e0228d9c1c1f2fff98b7227ca59df4ba

  • SHA1

    583c0f058ac3a0abb3ad012d1abb6e7365758dc7

  • SHA256

    0107f3408025d36643aace44f1133ab57dfdc9b5c34587c8807ed89455fb127c

  • SHA512

    decf7025a958d291b3b39638285dfe3e4cd358edf6554979afd920c03246683b99a8c7c125aa1c67105d4b3b29cd58ebfc4bd1b287f2d7d254fb710e08da2a41

Malware Config

Extracted

Family

icedid

C2

ldrvals.casa

Targets

    • Target

      0107f3408025d36643aace44f1133ab57dfdc9b5c34587c8807ed89455fb127c

    • Size

      208KB

    • MD5

      e0228d9c1c1f2fff98b7227ca59df4ba

    • SHA1

      583c0f058ac3a0abb3ad012d1abb6e7365758dc7

    • SHA256

      0107f3408025d36643aace44f1133ab57dfdc9b5c34587c8807ed89455fb127c

    • SHA512

      decf7025a958d291b3b39638285dfe3e4cd358edf6554979afd920c03246683b99a8c7c125aa1c67105d4b3b29cd58ebfc4bd1b287f2d7d254fb710e08da2a41

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks