0a497cdeb92189e1611c15669897de70e8aed2be2484346686252bea387abfa4_unpacked

General
Target

0a497cdeb92189e1611c15669897de70e8aed2be2484346686252bea387abfa4_unpacked

Size

13KB

Sample

220520-vdc6kaaeg2

Score
10 /10
MD5

399e402d426f0675ffcc8efa609421a8

SHA1

2a2e5b9bf49aca783574fcc2aa4a06dcb609a4c1

SHA256

42605a1640895ba3d64833f8fc077c074710b142fcb0332607af8560feb64a24

SHA512

8b70160e6062d1349e5d6fef9d2b73c12f1ddfa01aa6c7eb4735b614fa6d34c225ea2b5aa52be0c9c01af07bba9f5a2f44809a99186b5fe69ff1488c398b7702

Malware Config

Extracted

Family icedid
Campaign 3118344709
C2

speratinda.com

Extracted

Family icedid
Campaign 3118344709
Targets
Target

0a497cdeb92189e1611c15669897de70e8aed2be2484346686252bea387abfa4_unpacked

MD5

399e402d426f0675ffcc8efa609421a8

Filesize

13KB

Score
10/10
SHA1

2a2e5b9bf49aca783574fcc2aa4a06dcb609a4c1

SHA256

42605a1640895ba3d64833f8fc077c074710b142fcb0332607af8560feb64a24

SHA512

8b70160e6062d1349e5d6fef9d2b73c12f1ddfa01aa6c7eb4735b614fa6d34c225ea2b5aa52be0c9c01af07bba9f5a2f44809a99186b5fe69ff1488c398b7702

Tags

Signatures

  • IcedID, BokBot

    Description

    IcedID is a banking trojan capable of stealing credentials.

    Tags

  • suricata: ET MALWARE Win32/IcedID Request Cookie

    Description

    suricata: ET MALWARE Win32/IcedID Request Cookie

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation