General

  • Target

    606bcd4c30f22a2328a273538ab06aa033c6bfac32e95d73b9a9c5bfd39d2ebe

  • Size

    340KB

  • Sample

    220417-k4pbeagce6

  • MD5

    12c51d4a870f350f6337b5ca7a8ad6b3

  • SHA1

    0cbe6d48fc2ff7a97778dce3084b784466961570

  • SHA256

    606bcd4c30f22a2328a273538ab06aa033c6bfac32e95d73b9a9c5bfd39d2ebe

  • SHA512

    3f2d125dabcf2d13358178f56cae2882c1409212e404c1e99f30d720bcb0ed7c46a4ae2bf0f0a57eb43c49a8bf4a48f39e28c9ae3cac241baed2801e83c93eb7

Malware Config

Extracted

Family

icedid

C2

middleposition.cyou

artsteerlingwheel.top

Targets

    • Target

      606bcd4c30f22a2328a273538ab06aa033c6bfac32e95d73b9a9c5bfd39d2ebe

    • Size

      340KB

    • MD5

      12c51d4a870f350f6337b5ca7a8ad6b3

    • SHA1

      0cbe6d48fc2ff7a97778dce3084b784466961570

    • SHA256

      606bcd4c30f22a2328a273538ab06aa033c6bfac32e95d73b9a9c5bfd39d2ebe

    • SHA512

      3f2d125dabcf2d13358178f56cae2882c1409212e404c1e99f30d720bcb0ed7c46a4ae2bf0f0a57eb43c49a8bf4a48f39e28c9ae3cac241baed2801e83c93eb7

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks