General

  • Target

    6557f5eecf1df5c7835d2ed88f99b52503873c6307b946b15d81a1e5a885c87a

  • Size

    490KB

  • Sample

    220507-z96j7sfaf5

  • MD5

    ccc7f68d2dbd6801dde30ff57e5c0c2b

  • SHA1

    3899e2803ec9666b17684d1cd42931bb55a8f9e1

  • SHA256

    6557f5eecf1df5c7835d2ed88f99b52503873c6307b946b15d81a1e5a885c87a

  • SHA512

    26c47fec58849d42b107ee9ba7c1b3326aee5339d3865e1d795dff596dc4a1458a480d4dd884306a4e884ef033240c6269cad4461d283cfb9a5bf2d703ce234f

Malware Config

Extracted

Family

icedid

Campaign

3467965077

C2

firenicatrible.com

Targets

    • Target

      6557f5eecf1df5c7835d2ed88f99b52503873c6307b946b15d81a1e5a885c87a

    • Size

      490KB

    • MD5

      ccc7f68d2dbd6801dde30ff57e5c0c2b

    • SHA1

      3899e2803ec9666b17684d1cd42931bb55a8f9e1

    • SHA256

      6557f5eecf1df5c7835d2ed88f99b52503873c6307b946b15d81a1e5a885c87a

    • SHA512

      26c47fec58849d42b107ee9ba7c1b3326aee5339d3865e1d795dff596dc4a1458a480d4dd884306a4e884ef033240c6269cad4461d283cfb9a5bf2d703ce234f

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks