General

  • Target

    KFA5FhQN.dll

  • Size

    452KB

  • Sample

    220920-r7ls1sddh9

  • MD5

    3e58639c56f59ae8f2f63123a9075d6e

  • SHA1

    157d2b671a2aabb3ec4c62984f34965ebf2f625f

  • SHA256

    a7cdbc2f33354bb657f21e1652c3093ecf5a27a5736feb3fd4705408b0cba999

  • SHA512

    45648332cdfb657e321ecfd9f0b1f6f047844c5d22fee7f474d81a32cdea2c971879d5a8590d81c4a7047fb7ffe4db9c7829367c409e7c9fa949175f34caa3bf

  • SSDEEP

    6144:NGT7FWQ+IU6wOnhu8V3wflW5P1rh/F8vkQwXZ6XRTUrBFNbezWm80JZppZxnck93:Nr0BIHxwJwWtbeY0ZxN

Malware Config

Extracted

Family

icedid

Campaign

775636601

C2

aviadronazhed.com

Targets

    • Target

      KFA5FhQN.dll

    • Size

      452KB

    • MD5

      3e58639c56f59ae8f2f63123a9075d6e

    • SHA1

      157d2b671a2aabb3ec4c62984f34965ebf2f625f

    • SHA256

      a7cdbc2f33354bb657f21e1652c3093ecf5a27a5736feb3fd4705408b0cba999

    • SHA512

      45648332cdfb657e321ecfd9f0b1f6f047844c5d22fee7f474d81a32cdea2c971879d5a8590d81c4a7047fb7ffe4db9c7829367c409e7c9fa949175f34caa3bf

    • SSDEEP

      6144:NGT7FWQ+IU6wOnhu8V3wflW5P1rh/F8vkQwXZ6XRTUrBFNbezWm80JZppZxnck93:Nr0BIHxwJwWtbeY0ZxN

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks