General

  • Target

    925092c25da2b0f90fc3f948d8f9aba5f05fac72b49738a0fcfb1f4a41552974

  • Size

    536KB

  • Sample

    220707-vsnkvaeca7

  • MD5

    79b246bbad59e02fc9f902702a51575e

  • SHA1

    e421015a78f9e3ca48bc0fbe5b496b94bb50e84f

  • SHA256

    925092c25da2b0f90fc3f948d8f9aba5f05fac72b49738a0fcfb1f4a41552974

  • SHA512

    9925b6a923f4ab89bfecc35246341f3429ce8160876287477d7bd98a6dae37189a275864d4183a378f00a9b484e50fa439b414559e7ba4b36d6620941a28ee3c

Malware Config

Extracted

Family

icedid

Campaign

227378761

C2

blionarywesta.com

Targets

    • Target

      925092c25da2b0f90fc3f948d8f9aba5f05fac72b49738a0fcfb1f4a41552974

    • Size

      536KB

    • MD5

      79b246bbad59e02fc9f902702a51575e

    • SHA1

      e421015a78f9e3ca48bc0fbe5b496b94bb50e84f

    • SHA256

      925092c25da2b0f90fc3f948d8f9aba5f05fac72b49738a0fcfb1f4a41552974

    • SHA512

      9925b6a923f4ab89bfecc35246341f3429ce8160876287477d7bd98a6dae37189a275864d4183a378f00a9b484e50fa439b414559e7ba4b36d6620941a28ee3c

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • suricata: ET MALWARE Win32/IcedID Request Cookie

      suricata: ET MALWARE Win32/IcedID Request Cookie

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks