General

  • Target

    9d2db15627d67ead31cbcd1f5bcdb57c.dll

  • Size

    317KB

  • Sample

    220926-tbd5eabcb7

  • MD5

    9d2db15627d67ead31cbcd1f5bcdb57c

  • SHA1

    530b7c68696c5d0cd1e5288585b986c1f19f2fca

  • SHA256

    6d6f93be1849c4fb0ac660f6ab6c4a2f8e7a1fe081670af3abfa5754f4743c25

  • SHA512

    4631e3a9f6b9b9d6348da7ffe7764bf1d2f2207eb10c6f78b7bf102353b1bae04a0f8c5d2183bcbaea022d111d23019aa9871e82241f5a707382008e982c73b2

  • SSDEEP

    6144:sJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvL:A9kP7I/sm2lfv29pgEhhL

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      9d2db15627d67ead31cbcd1f5bcdb57c.dll

    • Size

      317KB

    • MD5

      9d2db15627d67ead31cbcd1f5bcdb57c

    • SHA1

      530b7c68696c5d0cd1e5288585b986c1f19f2fca

    • SHA256

      6d6f93be1849c4fb0ac660f6ab6c4a2f8e7a1fe081670af3abfa5754f4743c25

    • SHA512

      4631e3a9f6b9b9d6348da7ffe7764bf1d2f2207eb10c6f78b7bf102353b1bae04a0f8c5d2183bcbaea022d111d23019aa9871e82241f5a707382008e982c73b2

    • SSDEEP

      6144:sJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvL:A9kP7I/sm2lfv29pgEhhL

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks