General

  • Target

    e68bc022556603e8935cda493ce2b5c5fdf91b0ebfa45b2fb0c6b03842c50a55

  • Size

    242KB

  • Sample

    220418-qsy95ahfbq

  • MD5

    7b07db7c5b61c1a6195d1797d9d6a495

  • SHA1

    796131744a7eef358f836a17cf668ea984480433

  • SHA256

    e68bc022556603e8935cda493ce2b5c5fdf91b0ebfa45b2fb0c6b03842c50a55

  • SHA512

    c9fb00512df6913f45a291d73e7885c7aea19431dadc9d87f42e6c6a98f3ae9a0b0abcbd5b66ddbe5e3fa810f9351bc167cfb28ad2bd950d8f77b6f25e6b4953

Malware Config

Extracted

Family

icedid

C2

goblinsdown.top

daysarecommitee.top

Targets

    • Target

      e68bc022556603e8935cda493ce2b5c5fdf91b0ebfa45b2fb0c6b03842c50a55

    • Size

      242KB

    • MD5

      7b07db7c5b61c1a6195d1797d9d6a495

    • SHA1

      796131744a7eef358f836a17cf668ea984480433

    • SHA256

      e68bc022556603e8935cda493ce2b5c5fdf91b0ebfa45b2fb0c6b03842c50a55

    • SHA512

      c9fb00512df6913f45a291d73e7885c7aea19431dadc9d87f42e6c6a98f3ae9a0b0abcbd5b66ddbe5e3fa810f9351bc167cfb28ad2bd950d8f77b6f25e6b4953

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks