General

  • Target

    31c88d5ad65313810e99c6dc34bc0531.dll.exe

  • Size

    358KB

  • Sample

    220925-vhdynagfhq

  • MD5

    31c88d5ad65313810e99c6dc34bc0531

  • SHA1

    58c96b6a73edea156e040742938e0bb9b2e08967

  • SHA256

    623120d6a798207ce9148b52e59849d78586eee76e9f229135fea2caded634b0

  • SHA512

    e853be323675ee04b39f8d1207e49645a3977e83959b57d4cafa7aab6c422ef347b67a87b3e44ff58119155d76ffc417a0b1141e7d6d1878a47e7f8bf1be3f74

  • SSDEEP

    6144:t6HdvqSwNOTzZLen7qACQ9j6pSHP7csiU302dw9qOU:UPLQHP7AX2djOU

Malware Config

Extracted

Family

icedid

Campaign

2432960414

C2

zalikomanperis.com

Targets

    • Target

      31c88d5ad65313810e99c6dc34bc0531.dll.exe

    • Size

      358KB

    • MD5

      31c88d5ad65313810e99c6dc34bc0531

    • SHA1

      58c96b6a73edea156e040742938e0bb9b2e08967

    • SHA256

      623120d6a798207ce9148b52e59849d78586eee76e9f229135fea2caded634b0

    • SHA512

      e853be323675ee04b39f8d1207e49645a3977e83959b57d4cafa7aab6c422ef347b67a87b3e44ff58119155d76ffc417a0b1141e7d6d1878a47e7f8bf1be3f74

    • SSDEEP

      6144:t6HdvqSwNOTzZLen7qACQ9j6pSHP7csiU302dw9qOU:UPLQHP7AX2djOU

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks