General

  • Target

    a4621ec7daf679ae7a1a787dfddfd5c0705dcc9199eb4bb73e16e37e167bd755

  • Size

    228KB

  • Sample

    220511-q5xbasggf8

  • MD5

    b08c946dbd7903d782a03427a58e17e2

  • SHA1

    764722588d98efd361638fbca5c1b92bf7ea1c96

  • SHA256

    a4621ec7daf679ae7a1a787dfddfd5c0705dcc9199eb4bb73e16e37e167bd755

  • SHA512

    e6af8b298f402d2093592c025c900139c3da16a7649475fece368d395c34d3a60ecd5dc8efdb6f72e216a9182ceff9fa09fa2154e5b4a6124b9a643074eba544

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

1453255761

C2

startluna.club

lunat.top

Attributes
  • auth_var

    2

  • url_path

    /audio/

Targets

    • Target

      a4621ec7daf679ae7a1a787dfddfd5c0705dcc9199eb4bb73e16e37e167bd755

    • Size

      228KB

    • MD5

      b08c946dbd7903d782a03427a58e17e2

    • SHA1

      764722588d98efd361638fbca5c1b92bf7ea1c96

    • SHA256

      a4621ec7daf679ae7a1a787dfddfd5c0705dcc9199eb4bb73e16e37e167bd755

    • SHA512

      e6af8b298f402d2093592c025c900139c3da16a7649475fece368d395c34d3a60ecd5dc8efdb6f72e216a9182ceff9fa09fa2154e5b4a6124b9a643074eba544

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks