General

  • Target

    7b0dff7f5bb6fd419cf93ba48dc5480f.dll.exe

  • Size

    317KB

  • Sample

    220926-sx4frabbh3

  • MD5

    7b0dff7f5bb6fd419cf93ba48dc5480f

  • SHA1

    bae1bd20f114d25e67a53fa6a6202ca4dcfd3dfa

  • SHA256

    e94a2ce41231a353fd2eb7eb1d259781b54321657bbd799b380e550cd0bfd9bc

  • SHA512

    01e1c035377204e77097aea470147dee800a965700452af7b8c232bc9a9d99001635a170a31cae7325c8fde363d7d2ce9b458c06a2cdbb3a8a4cc7e8ebca5c78

  • SSDEEP

    6144:iiaIMPl3fdywZzWsIRhcY2EmQ77BkP7+sPI1AF1:iiaxP58X2ikP7U1Af

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      7b0dff7f5bb6fd419cf93ba48dc5480f.dll.exe

    • Size

      317KB

    • MD5

      7b0dff7f5bb6fd419cf93ba48dc5480f

    • SHA1

      bae1bd20f114d25e67a53fa6a6202ca4dcfd3dfa

    • SHA256

      e94a2ce41231a353fd2eb7eb1d259781b54321657bbd799b380e550cd0bfd9bc

    • SHA512

      01e1c035377204e77097aea470147dee800a965700452af7b8c232bc9a9d99001635a170a31cae7325c8fde363d7d2ce9b458c06a2cdbb3a8a4cc7e8ebca5c78

    • SSDEEP

      6144:iiaIMPl3fdywZzWsIRhcY2EmQ77BkP7+sPI1AF1:iiaxP58X2ikP7U1Af

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks