General

  • Target

    4e5b7483c9a49bf36b644f22c1c4daef732742affd15ffd20dda4de85260e581

  • Size

    242KB

  • Sample

    220417-hwsmraaahm

  • MD5

    b0c76afe8c156ab68f90f1a481d180b3

  • SHA1

    22e94a6d6b50bc8f9dd79464e2fa4eba16491049

  • SHA256

    4e5b7483c9a49bf36b644f22c1c4daef732742affd15ffd20dda4de85260e581

  • SHA512

    e9d3e15c45a57204b887b5cbe2ad671d76507fa273792dabe9f6eaf074ddb6ce79d69fee66e9c832eb3b83d4e7788521c1a75413470be1c726f6d3d3d97ddbec

Malware Config

Extracted

Family

icedid

C2

goblinsdown.top

daysarecommitee.top

Targets

    • Target

      4e5b7483c9a49bf36b644f22c1c4daef732742affd15ffd20dda4de85260e581

    • Size

      242KB

    • MD5

      b0c76afe8c156ab68f90f1a481d180b3

    • SHA1

      22e94a6d6b50bc8f9dd79464e2fa4eba16491049

    • SHA256

      4e5b7483c9a49bf36b644f22c1c4daef732742affd15ffd20dda4de85260e581

    • SHA512

      e9d3e15c45a57204b887b5cbe2ad671d76507fa273792dabe9f6eaf074ddb6ce79d69fee66e9c832eb3b83d4e7788521c1a75413470be1c726f6d3d3d97ddbec

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks