General

  • Target

    4d3c594e119e5137a2baafc1174d57b08f7b8bbd8e9116331abf8063837c0222

  • Size

    364KB

  • Sample

    220419-gwq89agdgq

  • MD5

    b37ccf0c7fbef209b5ee1756a241d9b5

  • SHA1

    44619b9187772777d2ffa0dc4f262f6dbec0d07a

  • SHA256

    4d3c594e119e5137a2baafc1174d57b08f7b8bbd8e9116331abf8063837c0222

  • SHA512

    9f2b10d6203308bd25a12b7f10445fd4ed23ff498b23f24739dfb9d7db3096c2b7150120864e94b97e9c2e465282131eca9b0e169fa1b98da4c115cc8699d4c6

Malware Config

Extracted

Family

icedid

C2

heredeire.xyz

Targets

    • Target

      4d3c594e119e5137a2baafc1174d57b08f7b8bbd8e9116331abf8063837c0222

    • Size

      364KB

    • MD5

      b37ccf0c7fbef209b5ee1756a241d9b5

    • SHA1

      44619b9187772777d2ffa0dc4f262f6dbec0d07a

    • SHA256

      4d3c594e119e5137a2baafc1174d57b08f7b8bbd8e9116331abf8063837c0222

    • SHA512

      9f2b10d6203308bd25a12b7f10445fd4ed23ff498b23f24739dfb9d7db3096c2b7150120864e94b97e9c2e465282131eca9b0e169fa1b98da4c115cc8699d4c6

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks