General

  • Target

    7760b32aad54f7651898185b00c88b86717299f5b73be10df14fb748c1a1e35e

  • Size

    219KB

  • Sample

    220418-qs2egsdaf5

  • MD5

    f5f8b92ca19e43e9893315104b473892

  • SHA1

    97c1abd2e97ed3116d26ead856ab296ec9e298cb

  • SHA256

    7760b32aad54f7651898185b00c88b86717299f5b73be10df14fb748c1a1e35e

  • SHA512

    541039d91d5b3c1a918f3c17aa4b338d211c7e45b48ced020d89d6fa159614b83f91b5c8cd7ba4f4ede46938f05018c12ecc06f1e320fd52e1684607b4a86b77

Malware Config

Extracted

Family

icedid

C2

pashamasha.top

pohindra.online

propellerregis.top

reerwheels.top

Targets

    • Target

      7760b32aad54f7651898185b00c88b86717299f5b73be10df14fb748c1a1e35e

    • Size

      219KB

    • MD5

      f5f8b92ca19e43e9893315104b473892

    • SHA1

      97c1abd2e97ed3116d26ead856ab296ec9e298cb

    • SHA256

      7760b32aad54f7651898185b00c88b86717299f5b73be10df14fb748c1a1e35e

    • SHA512

      541039d91d5b3c1a918f3c17aa4b338d211c7e45b48ced020d89d6fa159614b83f91b5c8cd7ba4f4ede46938f05018c12ecc06f1e320fd52e1684607b4a86b77

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks