Resubmissions

13-10-2022 14:16

221013-rleskshbf8 10

26-09-2022 15:12

220926-slggvacdak 10

General

  • Target

    4a94ea3988c8c83e6618aaa256ba3b6c.dll

  • Size

    317KB

  • Sample

    220926-slggvacdak

  • MD5

    4a94ea3988c8c83e6618aaa256ba3b6c

  • SHA1

    1ef1dc961fdc47643fb0572daee1d80c018bbd75

  • SHA256

    14c55b751b375e41af83f4c53753ec849ef368396cfc0e2830d92fd31383fab7

  • SHA512

    2d73dad533b0625ff32ed5fd256e4c58df0fae2ea8f0c6e5a0239aad210ee4fb439eb22062ce7c67d2e6813c9fe19a8d1d875d78a60b79c2effb21a57378ad2a

  • SSDEEP

    6144:UiaIMPl3fdywZzWsIRhcY2EmQ77BkP7+sPI1AFN:UiaxP58X2ikP7U1AT

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      4a94ea3988c8c83e6618aaa256ba3b6c.dll

    • Size

      317KB

    • MD5

      4a94ea3988c8c83e6618aaa256ba3b6c

    • SHA1

      1ef1dc961fdc47643fb0572daee1d80c018bbd75

    • SHA256

      14c55b751b375e41af83f4c53753ec849ef368396cfc0e2830d92fd31383fab7

    • SHA512

      2d73dad533b0625ff32ed5fd256e4c58df0fae2ea8f0c6e5a0239aad210ee4fb439eb22062ce7c67d2e6813c9fe19a8d1d875d78a60b79c2effb21a57378ad2a

    • SSDEEP

      6144:UiaIMPl3fdywZzWsIRhcY2EmQ77BkP7+sPI1AFN:UiaxP58X2ikP7U1AT

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks