General

  • Target

    6020cfd6006c9c2bca8593c573eeae83c05106bdf5da3ee8b99bff8eb41ccc73

  • Size

    292KB

  • Sample

    220418-qsvxpshfbk

  • MD5

    cfd6ce351f28984ee9a63b1c6269216b

  • SHA1

    b73185f2f7efe6666c69d306b9669bb14aceceb2

  • SHA256

    6020cfd6006c9c2bca8593c573eeae83c05106bdf5da3ee8b99bff8eb41ccc73

  • SHA512

    180e77d3b6f6015c01017133ea0af06c5d9a074c629d1e02a6b92144d5a0894a018c0559bfbcac1b44d2922708c4d7544fc5b5aefce22a1552a32b2a97c2e380

Malware Config

Extracted

Family

icedid

C2

pashamasha.top

pohindra.online

Targets

    • Target

      6020cfd6006c9c2bca8593c573eeae83c05106bdf5da3ee8b99bff8eb41ccc73

    • Size

      292KB

    • MD5

      cfd6ce351f28984ee9a63b1c6269216b

    • SHA1

      b73185f2f7efe6666c69d306b9669bb14aceceb2

    • SHA256

      6020cfd6006c9c2bca8593c573eeae83c05106bdf5da3ee8b99bff8eb41ccc73

    • SHA512

      180e77d3b6f6015c01017133ea0af06c5d9a074c629d1e02a6b92144d5a0894a018c0559bfbcac1b44d2922708c4d7544fc5b5aefce22a1552a32b2a97c2e380

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks