General

  • Target

    94efbbb48b1d3703e1055160db06e65f.dll.exe

  • Size

    317KB

  • Sample

    220926-tag5nscdeq

  • MD5

    94efbbb48b1d3703e1055160db06e65f

  • SHA1

    516e2bb96abfe1f91cd00b0d67b596228536ddeb

  • SHA256

    bbe6b63e43398a3d4b36a5b669d5fd5b2e480b38ef31e6d6b2553374055d9187

  • SHA512

    cbb30485dd935d4d922458e3658fca02995dd44bd1983090facf4e5ee8819bc0d7b6761e7d32ebccfe625bc9c813fd1546b9ebe610e6c883f52d6fe7e9502190

  • SSDEEP

    6144:bJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvZ:/9kP7I/sm2lfv29pgEhhZ

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      94efbbb48b1d3703e1055160db06e65f.dll.exe

    • Size

      317KB

    • MD5

      94efbbb48b1d3703e1055160db06e65f

    • SHA1

      516e2bb96abfe1f91cd00b0d67b596228536ddeb

    • SHA256

      bbe6b63e43398a3d4b36a5b669d5fd5b2e480b38ef31e6d6b2553374055d9187

    • SHA512

      cbb30485dd935d4d922458e3658fca02995dd44bd1983090facf4e5ee8819bc0d7b6761e7d32ebccfe625bc9c813fd1546b9ebe610e6c883f52d6fe7e9502190

    • SSDEEP

      6144:bJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvZ:/9kP7I/sm2lfv29pgEhhZ

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks