General

  • Target

    0a497cdeb92189e1611c15669897de70e8aed2be2484346686252bea387abfa4_unpacked

  • Size

    13KB

  • Sample

    220520-vdc6kaaeg2

  • MD5

    399e402d426f0675ffcc8efa609421a8

  • SHA1

    2a2e5b9bf49aca783574fcc2aa4a06dcb609a4c1

  • SHA256

    42605a1640895ba3d64833f8fc077c074710b142fcb0332607af8560feb64a24

  • SHA512

    8b70160e6062d1349e5d6fef9d2b73c12f1ddfa01aa6c7eb4735b614fa6d34c225ea2b5aa52be0c9c01af07bba9f5a2f44809a99186b5fe69ff1488c398b7702

Malware Config

Extracted

Family

icedid

Campaign

3118344709

C2

speratinda.com

Extracted

Family

icedid

Campaign

3118344709

Targets

    • Target

      0a497cdeb92189e1611c15669897de70e8aed2be2484346686252bea387abfa4_unpacked

    • Size

      13KB

    • MD5

      399e402d426f0675ffcc8efa609421a8

    • SHA1

      2a2e5b9bf49aca783574fcc2aa4a06dcb609a4c1

    • SHA256

      42605a1640895ba3d64833f8fc077c074710b142fcb0332607af8560feb64a24

    • SHA512

      8b70160e6062d1349e5d6fef9d2b73c12f1ddfa01aa6c7eb4735b614fa6d34c225ea2b5aa52be0c9c01af07bba9f5a2f44809a99186b5fe69ff1488c398b7702

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks