7395676183.zip

General
Target

7395676183.zip

Size

395KB

Sample

220517-b4le3sgdar

Score
10 /10
MD5

73d5f4b3783bb6f457c91f2bde662a35

SHA1

6505243ffd492457d8d4122e3eba110e1c8262fc

SHA256

4d90394ae1d4b4bf8c3581d8262537cfe821606d6452671d4706491e9a7a2efe

SHA512

20a727ca572510057c021c138929e310f66b3b286692252232308dee3e42e6ca3538567847c4eb3ac9835707a7f636e86db9dee760d586a733e6d10ef3694548

Malware Config

Extracted

Family icedid
Botnet 3121611028
C2

implementalyhiol.rest

floppyfgreed.fun

headwayndred.rest

dasreropolo.quest

Attributes
auth_var
6
url_path
/news/
Targets
Target

9ede53bb75e64701670f375308be92763f13065773e0b7778deada79967265f2

MD5

cab5824842246db937c1c629dbcd3b25

Filesize

755KB

Score
10/10
SHA1

88d5698bed7b519aecfa689854f83e39ec951f34

SHA256

9ede53bb75e64701670f375308be92763f13065773e0b7778deada79967265f2

SHA512

12f2ebb6bf88a40ac33e203ffbc1e347d0c76c44cff1f51e340abb6b2084518ef2424aa4779fc509a780c4e586d12533ddc12f25ec9a757b60f510a5cdd2063f

Tags

Signatures

  • IcedID, BokBot

    Description

    IcedID is a banking trojan capable of stealing credentials.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks