Resubmissions

04/05/2022, 07:03

220504-hvm1wadca210

03/05/2022, 20:59

220503-zsw97sceg210

General

  • Target
    f95a8ceb27ce17f5d159d75690fcb1628bf9528331aef2ffe3dac02712b67e48
  • Size 148KB
  • Sample220504-hvm1wadca2
  • SHA256 f95a8ceb27ce17f5d159d75690fcb1628bf9528331aef2ffe3dac02712b67e48
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • icedid

Botnet
  • 1076950734

C2
  • justiceminister.best

  • fivejudgescatholic.cyou

Attributes
  • auth_var

    3

  • url_path

    /audio/

Extracted

Family
  • icedid

Targets

    • Target
      f95a8ceb27ce17f5d159d75690fcb1628bf9528331aef2ffe3dac02712b67e48
    • Size 148KB
    • SHA256 f95a8ceb27ce17f5d159d75690fcb1628bf9528331aef2ffe3dac02712b67e48
    • MD5 SHA1 SHA512
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks