General

  • Target

    02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8

  • Size

    222KB

  • Sample

    220502-s3m1ysgdf4

  • MD5

    1edd74e9364e74eb0b05148d26b6d433

  • SHA1

    adbfcf70acc64c905290a9a66acc13cdf6981467

  • SHA256

    02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8

  • SHA512

    bd3f327f2c7cd592052767c0c73c50fcbad1e09abcaefc17c83121f5471825470bab335f0eca8e72c5e98a8d100a3b1f39c1aeaa42f28194214a8043009dd98c

Malware Config

Extracted

Family

icedid

C2

fikilederes.club

Targets

    • Target

      02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8

    • Size

      222KB

    • MD5

      1edd74e9364e74eb0b05148d26b6d433

    • SHA1

      adbfcf70acc64c905290a9a66acc13cdf6981467

    • SHA256

      02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8

    • SHA512

      bd3f327f2c7cd592052767c0c73c50fcbad1e09abcaefc17c83121f5471825470bab335f0eca8e72c5e98a8d100a3b1f39c1aeaa42f28194214a8043009dd98c

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks