General

  • Target

    ebcb71230ee2957d42c96e87027e26d9186091b61f900ccdb1f738ae10ad2d81

  • Size

    160KB

  • Sample

    220420-n4lgasfhbk

  • MD5

    df8a2b2a908ec9c91873791d342d5f61

  • SHA1

    87d4d15f6cd4311a5bd9bb3d3ed36fbdebe37410

  • SHA256

    ebcb71230ee2957d42c96e87027e26d9186091b61f900ccdb1f738ae10ad2d81

  • SHA512

    9b6e3787f4f22422b7fe912d1060c401c57133086a8249c8d1e2a7a01dae410be72837a31a70b32bc8dcd296e44493b2421aa455ca47380c4da55cd65990254b

Malware Config

Extracted

Family

icedid

C2

54asplane.top

yorkykukri24.top

Targets

    • Target

      ebcb71230ee2957d42c96e87027e26d9186091b61f900ccdb1f738ae10ad2d81

    • Size

      160KB

    • MD5

      df8a2b2a908ec9c91873791d342d5f61

    • SHA1

      87d4d15f6cd4311a5bd9bb3d3ed36fbdebe37410

    • SHA256

      ebcb71230ee2957d42c96e87027e26d9186091b61f900ccdb1f738ae10ad2d81

    • SHA512

      9b6e3787f4f22422b7fe912d1060c401c57133086a8249c8d1e2a7a01dae410be72837a31a70b32bc8dcd296e44493b2421aa455ca47380c4da55cd65990254b

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks