General

  • Target

    b985a77773a2d5226c31af6f3a108757.dll.exe

  • Size

    317KB

  • Sample

    220926-tknefacdhp

  • MD5

    b985a77773a2d5226c31af6f3a108757

  • SHA1

    129aa01a276a17870bd6a4255f9db171b2dc7206

  • SHA256

    17a9a57035525ee568e49a9378b3f44f44e713205ac734c5d404ea5d0b75c65d

  • SHA512

    c75bbf114cdb0fc5427b4ea2ddc0284d25987ed7680f5aebc84222b8e1c3ab87f3b3d23ebf68147067d04a6d020a5845713421fdf20413d18eb6906bd2212e3b

  • SSDEEP

    6144:niaIMPl3fdywZzWsIRhcY2EmQ77BkP7+sPI1AFH:niaxP58X2ikP7U1AR

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Targets

    • Target

      b985a77773a2d5226c31af6f3a108757.dll.exe

    • Size

      317KB

    • MD5

      b985a77773a2d5226c31af6f3a108757

    • SHA1

      129aa01a276a17870bd6a4255f9db171b2dc7206

    • SHA256

      17a9a57035525ee568e49a9378b3f44f44e713205ac734c5d404ea5d0b75c65d

    • SHA512

      c75bbf114cdb0fc5427b4ea2ddc0284d25987ed7680f5aebc84222b8e1c3ab87f3b3d23ebf68147067d04a6d020a5845713421fdf20413d18eb6906bd2212e3b

    • SSDEEP

      6144:niaIMPl3fdywZzWsIRhcY2EmQ77BkP7+sPI1AFH:niaxP58X2ikP7U1AR

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks