General

  • Target

    5060-132-0x0000000180000000-0x0000000180009000-memory.dmp

  • Size

    36KB

  • Sample

    221003-kqs3fafgf2

  • MD5

    1c233b0d7f3e5e466e4282b18a6909d4

  • SHA1

    cd2cb95396730c4518559fb36e7edbc47ffe7914

  • SHA256

    70ba0a8d83b1319ac07d00c31a67c10f525ec1b076f281aeec89857293657e82

  • SHA512

    126f16c0d28449aead1ba868db977d812c804f9606c6a23c641669b654101f69cc3861fbe073f4868fd2adff70e6c7bc47b58bd0a2513d9b130611e0b69c85eb

  • SSDEEP

    192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwk90XBAQYfPq/3Kb:h1Mf0gJSix2AA56RCiZVu9uGQYnq/6b

Malware Config

Extracted

Family

icedid

Campaign

2909555027

C2

guversaksi.com

Targets

    • Target

      5060-132-0x0000000180000000-0x0000000180009000-memory.dmp

    • Size

      36KB

    • MD5

      1c233b0d7f3e5e466e4282b18a6909d4

    • SHA1

      cd2cb95396730c4518559fb36e7edbc47ffe7914

    • SHA256

      70ba0a8d83b1319ac07d00c31a67c10f525ec1b076f281aeec89857293657e82

    • SHA512

      126f16c0d28449aead1ba868db977d812c804f9606c6a23c641669b654101f69cc3861fbe073f4868fd2adff70e6c7bc47b58bd0a2513d9b130611e0b69c85eb

    • SSDEEP

      192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwk90XBAQYfPq/3Kb:h1Mf0gJSix2AA56RCiZVu9uGQYnq/6b

    Score
    3/10

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks