General

  • Target

    42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588

  • Size

    386KB

  • Sample

    220427-szhl3afbcm

  • MD5

    1a0c60a67a3d71862b8631d2dc359e3b

  • SHA1

    dd38e197d21a8746502541fa72b4f37fc22c940f

  • SHA256

    42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588

  • SHA512

    b01b0ffd9e07fc5807d6fd92a5ec2cf350d928a973cae8012f7bbcfb3642caae0d457231a810ab77839f81c4ae49dd000f88d98e5af8a759845e6bf69dd4376c

Malware Config

Extracted

Family

icedid

C2

freeharritage.top

gohoemmuzlimanz.best

Targets

    • Target

      42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588

    • Size

      386KB

    • MD5

      1a0c60a67a3d71862b8631d2dc359e3b

    • SHA1

      dd38e197d21a8746502541fa72b4f37fc22c940f

    • SHA256

      42769cd17b00671f1a38030e4641745117b20924e1e65ad156a8af77210b9588

    • SHA512

      b01b0ffd9e07fc5807d6fd92a5ec2cf350d928a973cae8012f7bbcfb3642caae0d457231a810ab77839f81c4ae49dd000f88d98e5af8a759845e6bf69dd4376c

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks