General

  • Target

    sol3nia.zip

  • Size

    206KB

  • Sample

    220629-ykjtgacdeq

  • MD5

    11d335ba207582c5e2790f7907181a17

  • SHA1

    a9eb4ae2b5c9064c5a01363cfba2359fa48f5aef

  • SHA256

    2a469601228e95defe50092a2dde56bd0a6ea62ff8162653094c9d41f7ab95a4

  • SHA512

    904dcbd3a7ae2ff1f7c06b6cc9c791339d903dfdfaceb9dd97685c092edd9122ec5c8560273044d0228898f0e0350fd24b98d628d56cfaee51962c2ffa113e51

Malware Config

Extracted

Family

icedid

Campaign

3585208491

C2

bredofenction.com

Targets

    • Target

      sol3nia.zip

    • Size

      206KB

    • MD5

      11d335ba207582c5e2790f7907181a17

    • SHA1

      a9eb4ae2b5c9064c5a01363cfba2359fa48f5aef

    • SHA256

      2a469601228e95defe50092a2dde56bd0a6ea62ff8162653094c9d41f7ab95a4

    • SHA512

      904dcbd3a7ae2ff1f7c06b6cc9c791339d903dfdfaceb9dd97685c092edd9122ec5c8560273044d0228898f0e0350fd24b98d628d56cfaee51962c2ffa113e51

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks