General

  • Target

    b5da433a92cf5d78f381a18b0a3765b4.dll.exe

  • Size

    317KB

  • Sample

    220926-tknefacdhn

  • MD5

    b5da433a92cf5d78f381a18b0a3765b4

  • SHA1

    089cc900b9e9a7167c9bcc276be3e8e587181b86

  • SHA256

    eeb435fb0f0109b20bb9e984d4c05ea0aa3e935d9ed61531ed036a5d23fc3d3b

  • SHA512

    81c49232f498eb0050bdf5b8a4fad0599a072fd70e0686e291ad496ee675901dda0bca9981a5d9e6088e0aacbcc3ca822c80a1a559691bbb56e59b7c6b29d79b

  • SSDEEP

    6144:jJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvx:39kP7I/sm2lfv29pgEhhx

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      b5da433a92cf5d78f381a18b0a3765b4.dll.exe

    • Size

      317KB

    • MD5

      b5da433a92cf5d78f381a18b0a3765b4

    • SHA1

      089cc900b9e9a7167c9bcc276be3e8e587181b86

    • SHA256

      eeb435fb0f0109b20bb9e984d4c05ea0aa3e935d9ed61531ed036a5d23fc3d3b

    • SHA512

      81c49232f498eb0050bdf5b8a4fad0599a072fd70e0686e291ad496ee675901dda0bca9981a5d9e6088e0aacbcc3ca822c80a1a559691bbb56e59b7c6b29d79b

    • SSDEEP

      6144:jJIId9kP7+sYAdo9ZvHsJge7lfh+mQVri2VrpgEhBvx:39kP7I/sm2lfv29pgEhhx

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks