General

  • Target

    7fd8eddf1c48476f5c029f79e520bcf30b6e721b0e7df18ab6e9c9af167973b1

  • Size

    224KB

  • Sample

    220503-zswcxafbhp

  • MD5

    0642606a7de23c0aa28be0654f239227

  • SHA1

    14c1b53c9d5464071ebe172b3bfea45ec2e909e8

  • SHA256

    7fd8eddf1c48476f5c029f79e520bcf30b6e721b0e7df18ab6e9c9af167973b1

  • SHA512

    a57177f2d2d6cd7fda10c922246cd53da8864527c69312bf5dc2a9f4302e3c799f5d70e7e3dd1f2a3059a41cba289720b3a41f1bc61b5874bbcd66bd774a4276

Malware Config

Extracted

Family

icedid

C2

loadberlin.casa

Targets

    • Target

      7fd8eddf1c48476f5c029f79e520bcf30b6e721b0e7df18ab6e9c9af167973b1

    • Size

      224KB

    • MD5

      0642606a7de23c0aa28be0654f239227

    • SHA1

      14c1b53c9d5464071ebe172b3bfea45ec2e909e8

    • SHA256

      7fd8eddf1c48476f5c029f79e520bcf30b6e721b0e7df18ab6e9c9af167973b1

    • SHA512

      a57177f2d2d6cd7fda10c922246cd53da8864527c69312bf5dc2a9f4302e3c799f5d70e7e3dd1f2a3059a41cba289720b3a41f1bc61b5874bbcd66bd774a4276

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks