General

  • Target

    2fa82bdf1836fc7f61d09637580ca0ea26f3aed7e59acad9cd7f793148368214.dll

  • Size

    13KB

  • Sample

    220623-t2f2paggf6

  • MD5

    51ab7bee5c23093e4eed61629dd74f22

  • SHA1

    1a7a730d9e50c373fb0f4ab92cceaf26bfcd3d3c

  • SHA256

    2fa82bdf1836fc7f61d09637580ca0ea26f3aed7e59acad9cd7f793148368214

  • SHA512

    f74624982337a372293d0dac5e48308367841bc755c9950a7aa0110e17f1dd136892791d85cb1f5d5433ece22dca552bfdc3bb2f402fccb0059f86432c1f794d

Malware Config

Extracted

Family

icedid

Campaign

3289900935

C2

ilzenhwery.com

Extracted

Family

icedid

Campaign

3289900935

Targets

    • Target

      2fa82bdf1836fc7f61d09637580ca0ea26f3aed7e59acad9cd7f793148368214.dll

    • Size

      13KB

    • MD5

      51ab7bee5c23093e4eed61629dd74f22

    • SHA1

      1a7a730d9e50c373fb0f4ab92cceaf26bfcd3d3c

    • SHA256

      2fa82bdf1836fc7f61d09637580ca0ea26f3aed7e59acad9cd7f793148368214

    • SHA512

      f74624982337a372293d0dac5e48308367841bc755c9950a7aa0110e17f1dd136892791d85cb1f5d5433ece22dca552bfdc3bb2f402fccb0059f86432c1f794d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks