General

  • Target

    markstone_epilachna_myalgia.db

  • Size

    56KB

  • Sample

    221019-11pe1aafam

  • MD5

    14845c41b8d1a4af30bbe562cfc7aff6

  • SHA1

    b525ed312374af898bc7b1cfd760a79fab0c3b0c

  • SHA256

    5c778a9a0508a83ac8362852bab377f2f79dcca79cd5cd77456b9c7802917684

  • SHA512

    98becefe34f2090e70f93fbd8797e4737d93fe3ff04822bd3a070217199dbbc5c2ab1082e89689f896a1c3abfbf1a19aa3c4f13fd9802a16b902b68ce93ac9ed

  • SSDEEP

    1536:6EJQstAoXSQ4Vz3nGDS2+aRcLNpjx/NyhqH15QoArSyACXg:FJLjXSQ636dIchqzQx

Malware Config

Extracted

Family

icedid

Campaign

56237520

C2

tablearmestion.com

Targets

    • Target

      markstone_epilachna_myalgia.db

    • Size

      56KB

    • MD5

      14845c41b8d1a4af30bbe562cfc7aff6

    • SHA1

      b525ed312374af898bc7b1cfd760a79fab0c3b0c

    • SHA256

      5c778a9a0508a83ac8362852bab377f2f79dcca79cd5cd77456b9c7802917684

    • SHA512

      98becefe34f2090e70f93fbd8797e4737d93fe3ff04822bd3a070217199dbbc5c2ab1082e89689f896a1c3abfbf1a19aa3c4f13fd9802a16b902b68ce93ac9ed

    • SSDEEP

      1536:6EJQstAoXSQ4Vz3nGDS2+aRcLNpjx/NyhqH15QoArSyACXg:FJLjXSQ636dIchqzQx

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks