General

  • Target

    2acf6b06d8a6aba42d2829b886c8e801.exe

  • Size

    148KB

  • Sample

    220929-14g54adabm

  • MD5

    2acf6b06d8a6aba42d2829b886c8e801

  • SHA1

    97aaa94d8b3d4f1b56a21429a10e3f27e115b180

  • SHA256

    1ff6aefc4e45ece0e3cc73e02d3dd463bb4fe1d2101b1b1af0fbfb97318264f9

  • SHA512

    cfee06afba7131f515093d615aea42b010094d7c615ad8794fb9f602e60e5803c493e9a759485d6de32ad5a08860de7acf20143dccea3ec38daa7db985de941f

  • SSDEEP

    1536:1gkpq7SF0ivbmqBrUNzeNLwnAMzPO3YI2Tmogeg+aMzPz8ZUvMWHnTX9ZSk1kyIE:1gUsivhrUYNMGIRFg+a28VeTVw2iBk

Malware Config

Extracted

Family

icedid

Campaign

1384743275

C2

ranmilokd.com

Targets

    • Target

      2acf6b06d8a6aba42d2829b886c8e801.exe

    • Size

      148KB

    • MD5

      2acf6b06d8a6aba42d2829b886c8e801

    • SHA1

      97aaa94d8b3d4f1b56a21429a10e3f27e115b180

    • SHA256

      1ff6aefc4e45ece0e3cc73e02d3dd463bb4fe1d2101b1b1af0fbfb97318264f9

    • SHA512

      cfee06afba7131f515093d615aea42b010094d7c615ad8794fb9f602e60e5803c493e9a759485d6de32ad5a08860de7acf20143dccea3ec38daa7db985de941f

    • SSDEEP

      1536:1gkpq7SF0ivbmqBrUNzeNLwnAMzPO3YI2Tmogeg+aMzPz8ZUvMWHnTX9ZSk1kyIE:1gUsivhrUYNMGIRFg+a28VeTVw2iBk

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks