General

  • Target

    f277d223bdc994b386e3f267cb1512ca0520471a2525a99a839854a085d067f1

  • Size

    179KB

  • Sample

    220420-lpjytafef9

  • MD5

    e66d56a3d670a47202ae9f3d4008b5e1

  • SHA1

    826faa17d91a6bdb649f562251bab51d7aba45df

  • SHA256

    f277d223bdc994b386e3f267cb1512ca0520471a2525a99a839854a085d067f1

  • SHA512

    e356cdb25c639adc5711dea2587bab46fc633bcb256e6f63daab3c069ca5c11d83b53b53c0db98dbe3df65ffd396ddcaca86fd77a183ecaca21a966bf01892c1

Malware Config

Extracted

Family

icedid

C2

balkimraklire.cyou

angarakolessi.top

Targets

    • Target

      f277d223bdc994b386e3f267cb1512ca0520471a2525a99a839854a085d067f1

    • Size

      179KB

    • MD5

      e66d56a3d670a47202ae9f3d4008b5e1

    • SHA1

      826faa17d91a6bdb649f562251bab51d7aba45df

    • SHA256

      f277d223bdc994b386e3f267cb1512ca0520471a2525a99a839854a085d067f1

    • SHA512

      e356cdb25c639adc5711dea2587bab46fc633bcb256e6f63daab3c069ca5c11d83b53b53c0db98dbe3df65ffd396ddcaca86fd77a183ecaca21a966bf01892c1

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks