General

  • Target

    b7dcbb82cb674265b75afb54c2a614c9652bdd399e48c8cfe60845dd28e37ee3.dll

  • Size

    13KB

  • Sample

    220628-wstmjadbd3

  • MD5

    b3ce8229bd3b8a405e2d66f6ede1fc53

  • SHA1

    1796045b06dfde752a632e2b97e13a7e8190acac

  • SHA256

    b7dcbb82cb674265b75afb54c2a614c9652bdd399e48c8cfe60845dd28e37ee3

  • SHA512

    f270ee55aa769969832dc63ddfc673583934f8d056efbbcb5b3daff800bc0d6ec49d30a88b834be8243d2216681e7807f1e4979162e7b17326ed0abd5a5f81b6

Malware Config

Extracted

Family

icedid

Campaign

3568430872

C2

alionavon.com

Extracted

Family

icedid

Campaign

3568430872

Targets

    • Target

      b7dcbb82cb674265b75afb54c2a614c9652bdd399e48c8cfe60845dd28e37ee3.dll

    • Size

      13KB

    • MD5

      b3ce8229bd3b8a405e2d66f6ede1fc53

    • SHA1

      1796045b06dfde752a632e2b97e13a7e8190acac

    • SHA256

      b7dcbb82cb674265b75afb54c2a614c9652bdd399e48c8cfe60845dd28e37ee3

    • SHA512

      f270ee55aa769969832dc63ddfc673583934f8d056efbbcb5b3daff800bc0d6ec49d30a88b834be8243d2216681e7807f1e4979162e7b17326ed0abd5a5f81b6

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

MITRE ATT&CK Matrix

Tasks