General

  • Target

    3a559caa15750faca2cccfeb538b33edc569e79d69a7d6c5665e341ba5e76261.dll

  • Size

    13KB

  • Sample

    220625-qr6mtacben

  • MD5

    c2abdd316158251fb32f4df20ed3dc8e

  • SHA1

    6b5503e4c0380bc6800033090ccb765a3599ffcb

  • SHA256

    3a559caa15750faca2cccfeb538b33edc569e79d69a7d6c5665e341ba5e76261

  • SHA512

    9fcf5d2da32ce776beb0bd86e0f3c5b4456246c6f27e1cab773d5525adee7e90ba7a328301014fd343d4b8caed182bed2dab6b9d01efd8c509550ec0f681d0ce

Malware Config

Extracted

Family

icedid

Campaign

3585208491

C2

bredofenction.com

Extracted

Family

icedid

Campaign

3585208491

Targets

    • Target

      3a559caa15750faca2cccfeb538b33edc569e79d69a7d6c5665e341ba5e76261.dll

    • Size

      13KB

    • MD5

      c2abdd316158251fb32f4df20ed3dc8e

    • SHA1

      6b5503e4c0380bc6800033090ccb765a3599ffcb

    • SHA256

      3a559caa15750faca2cccfeb538b33edc569e79d69a7d6c5665e341ba5e76261

    • SHA512

      9fcf5d2da32ce776beb0bd86e0f3c5b4456246c6f27e1cab773d5525adee7e90ba7a328301014fd343d4b8caed182bed2dab6b9d01efd8c509550ec0f681d0ce

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks