General

  • Target

    9.dll

  • Size

    380KB

  • Sample

    220829-2lhvcahbd4

  • MD5

    c6a8854949a5e18c75f70d8297df49b0

  • SHA1

    6e7a7413ce01a45239d7c8f2c22987d45917140d

  • SHA256

    86a9cc531c6c50743da49f4dd79313a6dbb3a178866d258a6b50bef065f6c0a1

  • SHA512

    c4f2d68983dd4360bf0d73978df01ceeaf50349fcf4643ab300fc446d35738309835a40d572243ee314bd96ee9ae7a0fb2165162bb57d9e88a2d7fedf946b455

  • SSDEEP

    6144:0CjgQMt24rn2QQcIU9ycLHvomnVomk81Wa+V7HH2424rn2bBnHIsWrXIy4tBuu81:xjgQMt24rn2rcI9mk8nKHD24rn2tnHfA

Malware Config

Extracted

Family

icedid

Campaign

2260774107

C2

godenfasternow.com

Targets

    • Target

      9.dll

    • Size

      380KB

    • MD5

      c6a8854949a5e18c75f70d8297df49b0

    • SHA1

      6e7a7413ce01a45239d7c8f2c22987d45917140d

    • SHA256

      86a9cc531c6c50743da49f4dd79313a6dbb3a178866d258a6b50bef065f6c0a1

    • SHA512

      c4f2d68983dd4360bf0d73978df01ceeaf50349fcf4643ab300fc446d35738309835a40d572243ee314bd96ee9ae7a0fb2165162bb57d9e88a2d7fedf946b455

    • SSDEEP

      6144:0CjgQMt24rn2QQcIU9ycLHvomnVomk81Wa+V7HH2424rn2bBnHIsWrXIy4tBuu81:xjgQMt24rn2rcI9mk8nKHD24rn2tnHfA

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks